Passwords and Two-Step Sign-In for Business Accounts

What it typically looks like: The same short password on email, the bank and the website—something easy to remember, like a pet’s name and a birth year.

Why it matters: Weak or reused passwords are how accounts get taken over. If email is breached, a stranger can reset your other logins. That can mean lost mail, a hijacked Google listing or a website you cannot reach.

What to do: Give every important account its own password, and make it long enough that it is hard to guess. Never reuse your email password on anything else.

What it typically looks like: A notebook by the desk, a sticky note, or trying to memorize everything.

Why it matters: Remembering dozens of strong passwords is hard. Your browser (Chrome on most of our clients’ computers, and sometimes Safari or Edge) can store them on your own devices and fill them in for you.

What to do: Use the built-in password manager in the browser you already use, on computers and phones that belong to you. If you prefer a separate password app, that is fine too—but the browser you already have is enough for most people. If you still write passwords in a notebook, keep it at home in a safe place, not taped to the monitor.

What it typically looks like: After the password, the site asks for a short code from a text message or an authenticator app.

Why it matters: A stolen password alone should not be enough to open email, Google or banking.

What to do: Turn on two-step sign-in for email, Google and banking at minimum. Text codes work; an authenticator app is a bit stronger if you are comfortable with it.

What it typically looks like: A call, text or email: “This is Microsoft / Google / your bank. Read me the code that just came to your phone.” Or a stranger asking for your password.

Why it matters: That code is the key to the account. Scammers pretend to be real companies. At the same time, the agency that manages your site may legitimately need a code or a one-time login when you asked them for help—for example, troubleshooting email or setting up access.

What to do: Share a sign-in code or login only with someone you already know and trust, who you contacted, or who is working on something you asked for (like your web person). Never share a code or password with anyone who contacted you out of the blue by call, text or email, no matter who they say they are. Hang up or delete the message, and reach the company or your web team yourself through a number or address you already have.

Send questions to [email protected]. A screenshot of a settings screen is fine. Checking is free for Seaport clients.

Usually no. The password saver built into Chrome, Safari or Edge on your own devices is enough for most people. A separate app is optional if you want one.

Yes, if that is how you keep track—many careful people do. Keep it at home somewhere safe, not in plain sight at the office. Pair it with strong, unique passwords and two-step sign-in on email and banking.

Email, Google and banking. Those unlock almost everything else.

Yes, when you asked us for help and we are on the phone or email with you about that job. We may need a one-time code or a brief login so we can fix something or add proper access, then we log out. That is different from a stranger who calls out of the blue.

Hang up. Do not read them a code. Contact us or the company yourself using a number you already trust.