What makes a password strong? Length, symbols and password managers

Strong passwords are long, random and unique. Password generator creates them using your browser’s secure random source, and nothing is sent anywhere.

Steps

  1. Set the length. 16 characters suits most accounts; use 24 or more for important ones.
  2. Choose character types: lowercase, uppercase, numbers, symbols.
  3. Optional: avoid look-alike characters, force a starting letter, or exclude characters a website refuses.
  4. Generate, then save the password in a password manager.

What matters most

  1. Length. Each added character multiplies the number of guesses needed.
  2. Randomness. Human-made patterns like Name@1990 are among the first things attackers try. Generated passwords have no pattern.
  3. Uniqueness. One leaked reused password can open many accounts. Never reuse.

About symbols

A website that rejects certain symbols is common. Use Never use these characters to remove them. If a site demands a letter at the start, tick Start with a letter. A longer password without symbols can still be stronger than a short one with symbols.

Habits that protect you

  • Use a password manager, so you only remember one strong master password.
  • Turn on two-step verification for email, banking and social accounts.
  • Change a password if a service reports a breach.

Hashing is not storing

Developers should not store passwords with plain hashes; see SHA-256 and HMAC explained.

All guides

↑ ↓ navigateEnter openEsc close