How to Create a Strong Password You Can Actually Use

A strong password is long, random and used in only one place. Those three things matter far more than swapping letters for symbols.

Length is what makes guessing hard. Each extra character multiplies the number of possible passwords. A random passphrase of four or more words is both long and easy to type.

Predictable changes don’t help. Attackers know that P@ssw0rd is just password in disguise, and they try those patterns first.

Never reuse a password. When one site is breached, attackers try the same details on other sites. A password manager lets you use a different one everywhere and remember only one.

Turn on two-factor sign-in wherever you can, so a stolen password isn’t enough on its own. You can create one with our password generator, and test it with our strength checker. Both run in your browser.