(KAIT/NBC) - Our online passwords probably aren't good enough.
Cybersecurity experts warn there's a good chance they're already for sale on the internet.
In fact, the average person has 150 online accounts and just 12 passwords.
IBM's Caleb Barlow says hundreds of thousands of identities have been stolen on the web.
"We have to assume that there's a good chance our information is out there, which is why we have to keep changing our passwords and updating our accounts," Barlow said.
Barlow advises using long phrases, stored and encrypted within password vaults.
Answer security questions like "mother's maiden name," and "your elementary school," with information from your childhood friend or cousin.
For more cybersecurity tips, click here.