A Credit Card Free Holiday – Can it Happen?

Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can cause risk since much of those details can be discovered by a simple examination of social media.

Creating strong passwords offers greater security for minimal effort. Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can
cause risk since much of those details can be discovered by a simple examination of social media.

Under Lock and Key
You can buy a small padlock for less than a dollar—but you should not count on it to protect anything of value. A thief could probably pick a cheap lock without much effort, or simply break it. And yet, many people use similarly flimsy passwords to “lock up” their most valuable assets, including money and confidential information. Fortunately, everyone can learn how to make and manage stronger passwords. It is an easy way to strengthen security both at work and at home.

What Makes a Password ‘Strong’?
Let’s say you need to create a new password that’s at least 12 characters long, and includes numerals, symbols, and upper- and lowercase letters. You think of a word you can remember, capitalize the first
letter, add a digit, and end with an exclamation point. The result: Strawberry1!

Unfortunately, hackers have sophisticated password-breaking tools that can easily defeat passwords based on dictionary words (like “strawberry”) and common patterns, such as capitalizing the first letter.
Increasing a password’s complexity, randomness, and length can make it more resistant to hackers’ tools. For example, an eight-character password could be guessed by an attacker in less than a day, but a 12-character password would take two weeks. A 20-character password would take 21 centuries. You can learn more about creating strong passwords in your organization’s security awareness training. Your organization may also have guidelines or a password policy in place.

Why Uniqueness Matters
Many people reuse passwords across multiple accounts, and attackers take advantage of this risky behavior. If an attacker obtains one password—even a strong one—they can often use it to access other valuable accounts.

Here is a real-life example: Ten years ago, Alice joined an online gardening forum. She also created an online payment account and used the same password. She soon forgot about the gardening forum, but someone accessed her payments account years later and stole a large sum of money.

Alice did not realize the gardening forum had been hacked, and that users’ login credentials had been
leaked online. An attacker probably tried reusing Alice’s leaked password on popular sites—and
eventually got lucky.

Guarding Your Passwords & PINS. Passwords and PINS protect sensitive data and it's critical to keep them safe. Try these best practices to stay protected.

1. Do not write them down – Many make the mistake of writing passwords on post-it notes and
leaving them in plain sight. Even if you hide your password, someone could still find it. Similarly, do
not store your login information in a file on your computer, even if you encrypt that file.
2. Do not share passwords – You cannot be sure someone else will keep your credentials safe. At
work, you could be held responsible for anything that happens when someone is logged in as you.
3. Do not save login details in your browser – Some browsers store this information in unsafe
ways, and another person could access your accounts if they get your device.
4. Use a password manager – These tools can securely store and manage your passwords and
generate strong new passwords. Some can also alert you if a password may have been
compromised.
5. Never reuse passwords – Create a unique, strong password for each account or device. This
way, a single hacked account does not endanger other accounts.
6. Create complex, long passwords – Passwords based on dictionary words, pets’ names, or other
personal information can be guessed by attackers.

Have you ever had one of those months? The water heater stops heating, the dishwasher stops washing, and your family ends up on a first-name basis with the nurse at urgent care. Then, as you're driving to work, you see smoke coming from under your hood. Bad things happen to the best of us, and sometimes it seems like they come in waves. That's when an emergency cash fund can come in handy. One survey found that nearly 25% of Americans have no emergency savings. Another survey found that 40% of Americans said they wouldn't be able to comfortably handle an unexpected $1,000 expense.^1,2

How Much Money?

How large should an emergency fund be? There is no “one-size-fits-all” answer. The ideal amount may depend on your financial situation and lifestyle. For example, if you own a home or have dependents, you may be more likely to face financial emergencies. And if a job loss affects your income, you may need emergency funds for months.

Coming Up with Cash

If saving several months of income seems unreasonable, don't despair. Start with a more modest goal, such as saving $1,000, and build your savings a bit at a time. Consider setting up automatic monthly transfers into the fund. Once your savings begin to build, you may be tempted to use the money in the account for something other than an emergency. Try to avoid that. Instead, budget and prepare separately for bigger expenses you know are coming.

Where Do I Put It?

Many people open traditional savings accounts to hold emergency funds. They typically offer modest rates of return. The Federal Deposit Insurance Corporation (FDIC) insures bank accounts for up to $250,000 per depositor, per institution, in principal and interest.³ Others turn to money market accounts or money market funds in emergencies. While money market accounts are savings accounts, money market funds are considered low-risk securities. Money market funds are not backed by any government institution, which means they can lose money. Depending on your particular goals and the amount you have saved, some combination of lower-risk investments may be your best choice.

Money held in money market funds is not insured or guaranteed by the FDIC or any other government agency. Money market funds seek to preserve the value of your investment at $1.00 a share. However, it is possible to lose money by investing in a money market fund.⁴

Money market mutual funds are sold by prospectus. Please consider the charges, risks, expenses, and investment objectives carefully before investing. A prospectus containing this and other information about the investment company can be obtained from your financial professional. Read it carefully before you invest or send money.

The only thing you can know about unexpected expenses is that they're coming. Having an emergency fund may help to alleviate stress and worry that can come with them. If you lack emergency savings now, consider taking steps to create a cushion for the future.

Content in this material is for general information only and not intended to provide specific advice or recommendations for any individual.

1. MarketWatch.com, 2020
2. Bankrate.com, 2021
3. FDIC.gov, 2022
4. Investopedia.com, 2021