Most data breaches start with a stolen password. Here’s how to fix that

Somewhere in your organisation right now, an employee is reusing a password they created in 2019. Another is sharing login credentials for a team account through a Slack DM. A third is storing client portal access in a browser’s built-in autofill, synced to a personal Google account your IT team does not control.