Passwords when someone close is the risk
The usual advice assumes a stranger. Your risk may know your dog's name and your mother's birthday.
In plain words
Someone who knows you can guess passwords made from names and dates. Changing a password can be noticed right away. Check where a login’s recovery email goes.
Guessable is worse than weak
Someone who knows you can often guess passwords built from names, dates, and pets — and can answer your security questions. Passwords worth trusting are ones the other person couldn't reconstruct: random words, or generated by a password manager they can't open.
Changing passwords is visible
When you change a password on a shared or known account, the other person may find out immediately — a logged-out session is noticeable, and many services email every address on file about the change. Some people change nothing until they're ready, and create new accounts instead.
Recovery is a back door
An account is only as private as its recovery email and phone number. If those point to something the other person controls, they can take the account over politely, through the front door. Check recovery settings before trusting an account with anything sensitive.
What this does NOT protect against
- Security questions someone close can answer
- Recovery email or phone numbers the other person controls
- The visibility of the change itself — logged-out sessions, notification emails
- Keystroke-logging software on a monitored device
Last reviewed 2026-06-01. Technology changes; if something here looks different on your device, trust what your device shows.