How to Create a Strong Password
Last updated
A strong password is long, random and used for only one account. Humans are poor at randomness, so a generator does this better than you can.
Steps
- Choose a length. 16 or more characters is a sensible starting point for important accounts.
- Keep all character types on unless a site refuses symbols.
- Generate and copy the password.
- Save it straight into a password manager and enable two-factor authentication.
Why length matters most
Each extra character multiplies the number of possibilities. Choosing 16 characters from a pool of about 94 gives roughly 105 bits of randomness (16 × log₂ 94), far beyond what guessing attacks can cover.
Predictable tricks such as replacing a with @ add very little, because attackers try them first.
Safe habits
Never reuse a password between accounts. If one site leaks it, attackers try it everywhere else.
The generator uses your browser’s secure random number source, runs locally and does not save passwords. Close the page only after the password is stored somewhere safe.
Common questions
Should I avoid look-alike characters?
Only if you will type the password by hand. If you paste it from a manager, it makes no difference.