Use a password manager — stop reusing passwords

A password manager (such as 1Password, Bitwarden, or the one built into your browser or OS) generates and stores a unique, complex password for every site, so a breach at one company doesn't hand over the keys to everything else. It also removes the temptation to reuse "Password123!" style variations that are trivially guessable.

Coach's tip: roll it out with a 20-minute team session showing people how to save and autofill — adoption fails when it feels like homework.