The New York Times is reporting that a Russian hacker group has stolen at least 1.2 billion internet passwords and user names. Let it sink in: one-point-two billion.

That means that any of your user name/password combos from email sites to your shopping or bank sites could have been compromised. Google, iCloud (or any cloud service), Dropbox, Twitter, Facebook, Yahoo!, Ebay, Craigslist, Reddit are some of the sites you may not think to change passwords for.  Think again. You'll have to change them all.

Crap! That means it's time to come up with new passwords again. But wait! There are tricks and rules you should know first.

1. Use a different password for each site.

2. Yes, you can write it down, just keep it safe.

3. Change your passwords at least twice a year.

4. When websites offer it, use the two-factor or two step verification option.

5. Use a pass phrase to create your password. Be aware that you may still have to use symbols and numbers in your password.  For example:

My dog Cocoa loves 2 lick the floor!   is my pass phrase. So my password is MdCl2ltf!

Don't use mine, obviously. But you get it.

I long for the days when we could have the same password forever. They are gone. Forever.

 

 

More From 99.1 The Whale