Most account break-ins come from passwords that are short, reused or easy to guess. A few habits fix most of the risk.
What makes a password strong
- Length. Aim for at least 14 characters. Every extra character makes guessing much harder.
- Randomness. Avoid names, birthdays and keyboard patterns such as “qwerty”.
- Uniqueness. Use a different password for every important account. If one site is breached, the others stay safe.
Generate one
The password generator makes random passwords in your browser. Pick the length and the kinds of characters, and copy the result. Nothing is sent anywhere.
Tick “avoid look-alike characters” if you will have to type it by hand, so you do not mix up I, l and 1.
How to remember them
You do not have to. Use a password manager to store them and remember only one strong main password. If you prefer a phrase, join four or five unrelated words, such as “lamp river cheese orbit”. It is long and easier to recall than random symbols.
Other protection
- Turn on two-step verification for email, banking and social accounts.
- Never share a password or a one-time code, even with someone who says they are support staff.
- Do not save passwords in a plain note on a shared device.
For files
To lock a document, use protect PDF. A lost password cannot be recovered by anyone, so keep it in your manager.