What Makes a Strong Password?
Practical password guidance for creating longer, harder-to-guess credentials and reducing reuse across services.
Length matters
Long passwords or passphrases generally provide more possible combinations than short passwords. Avoid relying on a predictable pattern such as a name followed by a few digits.
Avoid reuse
A password that is unique to one service limits the damage if another service suffers a credential leak. A password manager can help you keep unique credentials without memorising every password.
Use multi-factor authentication
Where available, enable multi-factor authentication. It adds another verification step so a stolen password alone is less useful to an attacker.