Overview

A strong password is one of the most important controls for protecting your SPRL account. Weak, reused, or exposed passwords can increase the risk of unauthorized access to your account and the resources available through it.

Following good password practices, together with two-factor authentication and regular login-session reviews, can significantly improve the security of your SPRL account.

What Makes a Strong Password?

A strong password should be difficult for other people and automated systems to guess. Length and uniqueness are particularly important.

• Use a sufficiently long password.
• Use a password that is unique to SPRL.
• Avoid commonly used passwords.
• Avoid predictable patterns or easily available personal information.
• Consider using a reputable password manager to generate and store passwords securely.

Never Reuse Your SPRL Password

Using the same password across multiple websites creates additional risk. If another service experiences a data breach and your password is exposed, attackers may attempt to use the same credentials against your SPRL account.

Using a unique password for SPRL limits the impact of a password compromise on another service.

Avoid Easily Guessable Passwords

Avoid passwords based on information that other people may know or that can be discovered through public sources.

Examples of information to avoid include:

• Your name or username.
• Company or organization names.
• Birth dates.
• Phone numbers.
• Common words or phrases.
• Sequential numbers or letters.
• Repeated characters or predictable patterns.

Use a Password Manager

A reputable password manager can help you generate, store, and manage unique passwords without requiring you to remember every password individually.

For organizations with multiple users, password managers can also help establish more consistent credential-management practices.

• Generate unique passwords.
• Store passwords securely.
• Reduce the need to reuse passwords.
• Help manage credentials across multiple services.

Protect Your Password

A strong password is only useful if it remains confidential. Never disclose your password to another person or enter it into an untrusted website.

• Never share your password with another person.
• Do not send your password through email or chat.
• Do not include your password in support requests.
• Do not store passwords in publicly accessible documents.
• Do not enter your password into suspicious login pages.
• Be cautious when signing in from shared or public computers.

Protect Against Phishing

Phishing attacks may use fake login pages, emails, messages, or websites designed to convince you to reveal your credentials.

For more information, see Recognizing Phishing Attempts in the SPRL Help Center.

Use Two-Factor Authentication

Two-factor authentication provides an additional layer of protection beyond your password. If your password is compromised, 2FA can help prevent unauthorized access by requiring an additional authentication factor.

Enable two-factor authentication where available, particularly for accounts with administrative responsibilities or access to important organization resources.

When Should You Change Your Password?

Change your password when you believe it may have been exposed or compromised.

You should consider changing your password when:

• You believe someone else knows your password.
• You entered your credentials into a suspicious website.
• Your password was stored or shared insecurely.
• You receive an unexpected security notification related to your account.
• You discover unauthorized account activity.
• The password has been reused elsewhere and that other service has experienced a security incident.

After Changing Your Password

After changing your password because of a suspected security issue, review your account security settings and active login sessions where available.

1. Set a new unique password.
2. Review active login sessions.
3. Sign out of unfamiliar or unnecessary sessions.
4. Review two-factor authentication settings.
5. Check for unusual account activity.
6. Secure any related credentials if necessary.

Password Security for Organizations

Organizations should establish internal password-security practices for users who access SPRL.

• Encourage unique passwords for every service.
• Discourage credential sharing.
• Encourage the use of reputable password managers.
• Enable two-factor authentication where available.
• Review user access when responsibilities change.
• Educate users about phishing and credential theft.
• Establish procedures for handling suspected account compromise.

Passwords & Support

SPRL Support may need account-related information to investigate an issue, but passwords and authentication codes should remain confidential.

Password Security Best Practices

Frequently Asked Questions

Should my SPRL password be unique?

Yes. Your SPRL password should be unique and should not be reused on other websites or services.

Can I share my SPRL password with another user?

No. Passwords should remain confidential. Organizations should provide authorized users with their own account access where available rather than sharing credentials.

Should I use a password manager?

Using a reputable password manager can help you generate and securely store unique passwords for different services.

When should I change my password?

Change your password when you believe it has been exposed or compromised, when you have entered it into a suspicious website, or when related security activity indicates that your credentials may no longer be secure.

Does changing my password improve security?

Changing an exposed or compromised password can help protect your account. However, password changes should be combined with other security practices such as unique passwords, two-factor authentication, and session management.

Should I send my password to SPRL Support?

No. Never send your password or authentication codes to SPRL Support or include them in support requests.

What should I do if I entered my password on a suspicious website?

Change your SPRL password immediately, review your active login sessions, and review your other account security settings. Contact SPRL Support if you suspect unauthorized access.

Quick Reference