How to Create a Strong Password (Simple Rules)

Quick answer: a strong password is long (12-16+ characters), random and unique for every account. Use the Password Generator to make one and save it in a password manager.

The rules that matter

1. Length beats tricks. 16 random characters are far stronger than 8 characters with a clever pattern.
2. Make it random. Names, birthdays, phone numbers and words like "password123" are the first things attackers try.
3. Never reuse passwords. If one site is hacked, reused passwords open your other accounts.
4. Turn on two-step verification for email, banking, social media and WhatsApp.
5. Use a password manager so you only remember one master password.

Create one in a few seconds

1. Open the Password Generator.
2. Set the length to 16 or more.
3. Keep uppercase, lowercase, numbers and symbols on. If a site rejects some symbols, switch them off.
4. Tap Copy and paste it into the site's password box, then save it in your manager.

The generator runs in your browser with your device's secure random source. The password is never sent to us or stored.

How long is long enough?

Use	Length
Normal accounts	12+ characters
Email, banking, work	16+ characters
Master password for a manager	A long passphrase of 5-6 random words

What to avoid

• Using the same password everywhere
• Saving passwords in a notes app with no lock or in a chat
• Sharing passwords over WhatsApp or email
• Typing your password on links you received in messages

If you think an account was hacked

Change the password at once, turn on two-step verification, and sign out of other devices. Then change that password anywhere else you used it.

Related

Protect your WhatsApp with a unique password for your email, and share your number safely using a WhatsApp link instead of posting it everywhere.