What makes a password strong? Length, symbols and password managers
Strong passwords are long, random and unique. Password generator creates them using your browser’s secure random source, and nothing is sent anywhere.
Steps
- Set the length. 16 characters suits most accounts; use 24 or more for important ones.
- Choose character types: lowercase, uppercase, numbers, symbols.
- Optional: avoid look-alike characters, force a starting letter, or exclude characters a website refuses.
- Generate, then save the password in a password manager.
What matters most
- Length. Each added character multiplies the number of guesses needed.
- Randomness. Human-made patterns like
Name@1990are among the first things attackers try. Generated passwords have no pattern. - Uniqueness. One leaked reused password can open many accounts. Never reuse.
About symbols
A website that rejects certain symbols is common. Use Never use these characters to remove them. If a site demands a letter at the start, tick Start with a letter. A longer password without symbols can still be stronger than a short one with symbols.
Habits that protect you
- Use a password manager, so you only remember one strong master password.
- Turn on two-step verification for email, banking and social accounts.
- Change a password if a service reports a breach.
Hashing is not storing
Developers should not store passwords with plain hashes; see SHA-256 and HMAC explained.