SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-one-password-one-account

How many accounts should each password be used for, according to CISA?

One and only one account.

Start playing free

  1. Up to three low-risk accounts
  2. One and only one account ✔
  3. All your work accounts

Why: If a password is reused, one breach opens every account that shares it. Criminals try stolen passwords on other sites. A unique password keeps the damage to one account.

Huh, didn't know that: CISA says to require strong, unique passwords across the business.

The dad joke
My password is like a bad relationship. Easy to get into, hard to change.
Like this card?
Play the game

References

Answer: One and only one account. If a password is reused, one breach opens every account that shares it. Criminals try stolen passwords on other sites. A unique password keeps the damage to one account.

  1. CISA: Require Strong Passwords www.cisa.gov/secure-our-world/require-strong-passwords
    used for one and only one account
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyCISA says a strong business password should be at least how long?Security & PrivacyA scammer got your password. What about other accounts using that same password?Security & PrivacyCISA says employees need phishing training how often?

That's stuff everyone should know.