Weak and reused passwords are behind a huge share of hacked accounts. The fix is simple: long, unique passwords — and a few smart habits.
In this guide
- What makes a password strong?
- Method 1: Use a generator
- Method 2: Use a passphrase
- Test your password
- Extra protection
- Common mistakes to avoid
What makes a password strong?
- Length: at least 12–16 characters. Length beats complexity.
- Unpredictability: no names, birthdays, keyboard patterns or common words in order.
- Uniqueness: never reuse a password on another site.
Method 1: Use a generator
Our Password Generator creates random passwords like q7#Vt!m2Lx9@pR4w. Store them in a password manager so you never need to remember them.
Method 2: Use a passphrase
Combine 4–5 random, unrelated words: orbit-mango-ladder-quiet-73. Passphrases are long, strong and easier to remember than random characters.
Test your password
Check how strong an example password is with our Password Strength Checker. Avoid typing your real password into any website.
Extra protection
- Turn on two-factor authentication (2FA) for email, banking and social media.
- Use a reputable password manager.
- Change passwords immediately if a service reports a breach.
Common mistakes to avoid
- Password123, qwerty, 111111
- Your name + birth year
- Adding “1” or “!” to an old password
- Sharing passwords over chat or email
Frequently asked questions
How often should I change my password?
Change it if there is a breach or suspicion; forced frequent changes often lead to weaker passwords.
Are password managers safe?
Reputable managers encrypt your vault and are far safer than reusing passwords.
How long would it take to crack a 16-character random password?
With current technology, effectively impossible by brute force.
