In today’s digital world, passwords are the keys to nearly everything we do—teaching, research, collaboration, and communication. With so many accounts to manage, it’s understandable that many of us reuse the same password for convenience. But this habit, known as password recycling, remains one of the biggest risks to both personal information and university data.
Why We Keep Reusing Passwords
Even though most people know password recycling is unsafe, many of us still do it. The main reasons are surprisingly human:
- Fear of forgetting passwords
- Desire for convenience and control
It’s easy to see why. Between work systems, banking, online shopping, and social media, remembering dozens of unique passwords feels impossible. To make it easier, people often use familiar words—like a pet’s name or a birth date—that are simple to recall but equally simple for attackers to guess.
Another common misconception is that “my information isn’t valuable enough to steal.” In reality, even small pieces of personal data can be valuable to someone trying to impersonate you or access university systems.
How Password Reuse Puts UBC Data at Risk
For faculty and staff, password reuse doesn’t just endanger personal information—it can also expose UBC systems to attack. Recent surveys show that a quarter of global respondents reuse passwords across numerous accounts, with more than a third admitting to using personal information in their credentials that is publicly accessible on social media platforms and online forums. That overlap creates a critical weak point.
If an attacker obtains your credentials from a personal account that’s been exposed in a data breach, they can use those same details to try to log in elsewhere. This tactic, known as credential stuffing, automates the process—testing stolen usernames and passwords across multiple services until one works.
Because so many people reuse passwords, credential stuffing remains one of the most successful ways attackers gain unauthorized access. Once they’re in, criminals can steal sensitive data, impersonate users, or send phishing messages from a trusted UBC account.
Unique passwords act as a strong, simple barrier against this kind of attack.
Building Strong Habits Together
Strong, unique passwords and good password management are among the simplest and most effective ways to protect personal and institutional data.
When you use a password manager, create unique passphrases, and enable MFA, you’re not only protecting your own accounts; you’re helping protect the university community as a whole.
Small actions make a big difference. By sticking to these basics, each of us contributes to a stronger culture of privacy and security across UBC.