How to create strong passwords and passphrases safely

Section 01

The short answer

Use a unique password for every important account, make it long, avoid predictable patterns, and store it in a password manager. If you need to type it manually, use a long passphrase instead of a short memorable password.

Section 02

Why length matters most

Length increases the number of possible combinations. A long random password is usually stronger than a short password that only adds a symbol or number. Predictable substitutions like a to @ or o to 0 are not enough on their own.

Section 03

Random password vs passphrase

Random passwords are best for accounts stored in a password manager. Passphrases are better when you need something longer but more typeable. Both should be unique and not based on personal information.

• Random password: best for banking, admin, email, and password managers.
• Passphrase: useful when memorability or manual typing matters.
• Avoid quotes, names, birthdays, addresses, and repeated patterns.

Section 04

Why reuse is risky

Password reuse is one of the biggest risks. If one website leaks a reused password, attackers may try the same login on email, banking, social media, or work accounts.

Section 05

How to store generated passwords

Use a reputable password manager when possible. It can store unique passwords for each account and reduce the need to remember every credential. Avoid storing important passwords in plain text notes or screenshots.

Section 06

When to change a password

Change a password when it has been reused, exposed in a breach, shared with someone, or stored insecurely. For important accounts, also enable multi-factor authentication where available.

Section 07

What a generator cannot do

A generator can create a strong credential, but it cannot protect a reused password, a phishing mistake, malware, or an unsafe storage habit. Good password safety combines generation, storage, uniqueness, and account recovery hygiene.