How to protect yourself online with a secure password

The importance of having a secure password

We know it can be tempting to use similar passwords to make them easy to remember. But choosing strong passwords is very important to help keep your account secure and to prevent unauthorised access.

What makes a strong password

To help choose a strong password you should aim to:

• Ensure it is long enough - aim for at least 12 characters
• Use different types of characters - try to use uppercase letters, lowercase letters, numbers and symbols
• Update regularly - do not reuse passwords.

To make your password extra secure:

• Do not use classic passwords such as Password or Summer23
• Do not just use one word that can be found in the dictionary, or the name of a person, character or organisation such as Barbie or elonMusk
• Do not use a simple password and just replace some letters with numbers, such as b4n4n45 or c1nd3r3lla
• Do not include a string of characters as they appear on a keyboard, such as qwerty or 567
• Do not include the same character more than twice in a row such as www or 999
• Make sure it isn't too similar to your passwords for other apps and websites.

The strongest passwords are either made up of random characters, or a passphrase - this is when you use 3 or more words and also follow the other rules of a strong password, such as cl!ckmushN3W or onBREADgr0w?.

Remember – we’ll never ask you for your password. If you receive a call or an email from someone claiming to work at the Bank and they ask you for your password, say no and call us on 159 immediately.

Get help choosing a strong password

Password generators can help you choose a strong password, and you can edit options, such as how long it is and whether it includes symbols. They will not store your password generations unless you want them to.

Make sure to use a reputable password manager – Google, Apple, Microsoft and many other companies offer this service.

How to update your password

To keep your account safe we recommend you update your password every few months – if you have not updated it for a while, now is a good time to do so.

Follow these steps or watch our short video guide to updating your password.

1. Log into online banking.
2. Select 'Security' in the dashboard on the left, or if you're using a mobile or tablet select 'Menu' and then 'Security'.
3. Select 'Change Password'
4. Enter your current password.
5. Enter the verification code we send to you by text message or email - we use this to make sure it's really you making the change. If the code does not arrive you can select 'Resent code' and we'll send you another one.
6. Select 'Verify code'
7. Enter and confirm your new password - it must meet the requirements listed on the page and must not be shows as 'weak' in the password strength indicator.
8. Select 'Save password'

If successful you'll see a confirmation message saying that your password has been updated.

Never share verification codes with anyone who contacts you. If a fraudster gets it they can access your account and steal your money.

If you still have not received the code, underneath ‘Having trouble?’ you may be presented with an option to verify another way. If this option does not appear on your screen, you can always contact us instead.

What else can I do to protect my accounts?

Scammers and hackers are constantly updating their tactics to get to your information and money. To help protect yourself, remember to:

• Make your email passwords the strongest and most unique - your email account is one of the most valuable things to a criminal
• Regularly update your passwords - even if the app or website does not ask you to
• Read about how to store your passwords securely
• Keep up to date by reading the guides in our fraud hub.