If someone has figured out your password, they might be accessing your policy or contract without your knowledge. Regularly changing your password helps to prevent this type of unauthorised access.

Using numbers, mixed-case letters and minimum length in your password increases the difficulty of guessing or cracking your password. For example, there are more than 6 quadrillion possible variations for an eight-character password with numbers and mixed-case letters — 30,000 times more variations than an eight-character password with only lowercase letters.

Choose a combination of letters and numbers to create a unique password that's unrelated to your personal information. Or, select a random word or phrase, and insert letters and numbers into the beginning, middle, and end to make it extra difficult to guess (such as "[email protected]"). You won't be able to use simple words or phrases like "password" or "letmein," keyboard patterns such as "qwerty" or "qazwsx," or sequential patterns such as "abcd1234" as Momentum passwords any more - they're just too easy to guess.

Regularly check and update your email address and cellphone number so that you can get emails or SMSs in case you need to reset your password.

Once you've created a secure password, keep it in a secret place that is not accessible to anyone but you.