How to Create a Strong Password (and Why It Matters)
Weak passwords are the number-one cause of hacked accounts. Here is exactly what makes a password strong — and how to generate and test one for free.
Every year, millions of accounts are compromised — and the vast majority start with a weak or reused password. The fix is simpler than most people think, and it costs nothing.
What makes a password strong?
Three things matter most: length, randomness and uniqueness. Length is the single biggest factor — a 16-character password is exponentially harder to crack than an 8-character one. Randomness means avoiding real words, names and dates. Uniqueness means never reusing a password across sites.
The 4 rules of a strong password
- Use at least 12–16 characters.
- Mix uppercase, lowercase, numbers and symbols.
- Avoid dictionary words, names and obvious patterns like "123456".
- Use a different password for every account.
Generate one in one click
You do not have to invent random passwords yourself. A password generator uses your browser's cryptographically secure random source to create truly unpredictable passwords — and because it runs locally, the password is never sent anywhere.
Test the ones you already use
Not sure if your current password is safe? A password strength checker scores it instantly and shows exactly what to improve, all inside your browser.
Store them safely
Strong, unique passwords are impossible to memorise — and that is fine. Use a trusted password manager to store them, and turn on two-factor authentication (2FA) wherever it is offered. With those two habits plus a strong generated password, your accounts become dramatically harder to break into.