Smarter passwords will lower hacking risks – and here’s how