The Rhode Island Division of Taxation, the Internal Revenue Service and other partners in the Security Summit has urged taxpayers to use strong passwords for their online accounts and digital devices in order to protect their personal tax and financial data and prevent data theft.

In recent years, recommendations from cybersecurity experts have changed regarding what constitutes a strong password. The experts now suggest that people use word phrases that are easy to remember, rather than random letters, characters, and numbers that cannot be easily recalled. A new example is as follows: SomethingYouCanRemember@30.

Protecting access to digital devices is so critical that some are now using fingerprint or facial recognition technology. But if you are still using password protections, consider the following tips to protect devices or online accounts.

• Use a minimum of eight characters; longer is better.
• Use a combination of letters, numbers, and symbols, such as XYZ, 567, !@#.
• Avoid personal information or common passwords; opt for phrases.
• Change default/temporary passwords that come with accounts or devices.
• Do not reuse passwords. For example, changing Bgood!17 to Bgood!18 is not good enough; use unique usernames and passwords for accounts and devices.
• Do not use email addresses as usernames, if that is an option.
• Store any password list in a secure location, such as a safe or locked file cabinet.
• Do not disclose passwords to anyone for any reason.
• Use a password manager program to track passwords if you have numerous accounts.

Whenever it is an option for a password-protected account, users also should opt for a multi-factor authentication process. Many email providers, financial institutions and social media sties now offer customers two-factor authentication protections, which adds an extra layer of protection for your accounts. This holiday season don’t let criminals steal your money or your identity when you’re online.