If someone steals your Instagram or your email tomorrow, your business stops. I have seen it happen to people around me. The fix takes about 15 minutes: set up a password manager and turn on two-step verification (2FA) on the accounts that matter. Here is exactly how I do it.
What is a password manager?
A password manager is an app that creates, stores and fills in a different strong password for every account, all locked behind one master password or your fingerprint or face. You remember one thing; it remembers the rest.
Two-step verification (2FA) adds a second lock: even if someone gets your password, they also need a code from your phone or a passkey to get in.
How do you set up a password manager in 15 minutes?
Do it in this order and you are done before your coffee gets cold.
- Minute 0–3: pick one. If you live in the Apple world, the built-in Passwords app works across iPhone, iPad and Mac. On Android and Chrome, Google Password Manager is already there. If you mix devices, Bitwarden has a free plan that syncs across platforms.
- Minute 3–5: create a strong master password. Use a phrase of four or five random words. Write it on paper and keep it at home. This is the one password you never reuse.
- Minute 5–8: import what your browser already saved. Most managers can import passwords from Chrome, Safari or a CSV file. Then delete the copies from the old place.
- Minute 8–15: change your five most important passwords. Email first, then bank, Instagram, Facebook/Meta business and your website or store admin. Let the manager generate them.
How do you turn on two-step verification (2FA)?
Go to the security settings of each important account and look for “two-step verification” or “two-factor authentication”. Choose an authenticator app or a passkey over SMS whenever you can.
- Email: this one first, because it resets every other account.
- Instagram and Facebook: in Accounts Center, under Password and security.
- WhatsApp: Settings, Account, Two-step verification, and set a PIN.
- Your store or website: Shopify and WordPress both support 2FA (on WordPress usually through a plugin).
Every service gives you backup codes when you activate 2FA. Save them inside the password manager and print a copy. Without them, losing your phone becomes a nightmare.
What are passkeys and should you use them?
Passkeys are a newer way to log in where your phone or computer proves it is you with your face, fingerprint or PIN, and there is no password to steal. When a site offers a passkey, I take it. Your password manager can store them too.
Common mistakes I see (and made)
- Using the same password for email and socials. One leak opens everything.
- Keeping passwords in a notes app or a screenshot.
- Turning on 2FA by SMS and never saving the backup codes.
- Sharing the main login with a freelancer instead of giving them their own access with limited permissions.
Security is not glamorous, but it is the foundation of everything I build. When I set up an AI assistant for WhatsApp and Instagram, like I explained in this guide, the first thing I check is who has access to what. And if you are just getting started with AI, my tutorial for entrepreneurs is a good next read.
Block 15 minutes today. Future you will thank you. More of what I build on the home page.
— Patricio “King” Olivera
Frequently asked questions
Is it safe to keep all my passwords in one app?
A reputable password manager encrypts your vault so only your master password or device unlocks it. It is far safer than reusing the same password everywhere or keeping them in a notes app.
Which is better for 2FA: SMS or an authenticator app?
An authenticator app or a passkey. SMS is better than nothing, but codes sent by text can be intercepted or stolen through a SIM swap.
What happens if I lose my phone?
That is why you save the backup codes each service gives you when you turn on 2FA. Store them in your password manager and also printed somewhere safe at home.
Ready for the next step?
If your business runs on email, socials and WhatsApp, let’s review how protected it is:
- Talk to me on WhatsApp — quick answer
- Free AI audit — King Studio AI