Advice and guidance

1 Download resource

Passwords & Two-Step Verification

This guide explains how to create strong, unique passwords (for example using three random words) and why you should never reuse passwords across accounts. It also introduces Two‑Step Verification (2SV) – also called Two‑Factor Authentication (2FA) – as a vital extra layer of security to protect your accounts even if your password is compromised.

In essence: choose strong and separate passwords for each account, use a password manager if needed, and enable 2SV wherever possible to significantly boost your online safety.

Related resources

Cyber Advisor

The cyber advisor scheme assures organisations to provide general cyber security advice and support to a broad range of UK organisations.

Read more

CyberByte – October 2025

This month’s CyberByte focuses on a growing online threat linked to our increasing reliance on digital wallets – often referred to as “digital pickpocketing.” As our lives become more digitally connected, the convenience of storing payment cards, tickets and IDs […]

Read more

Cyber Security and IoT

A guide explaining why Internet of Things devices must be secure by design

Read more

Protective DNS for the private sector

Advice on the selection and deployment of protective Domain Name Systems (DNS).

Read more

Risk Management

The key types of risk that can affect your voluntary organisation and the importance of risk policy. Resource to support good governance when it comes to digital.

Read more

Public Sector Cyber Incident Co-ordination Procedure

Outlines the procedures for notifying and coordinating responses to notifiable cyber incidents affecting Scotland’s public services. It defines the agreed-upon cyber incident notification process adopted by the Scottish public sector since 2018.

Read more