Tools
Password Strength Educator
Type a password to see what makes it stronger or weaker. Nothing you type here is ever sent to a server, logged, or stored.
Nothing you type here is transmitted, stored, or logged — the check runs entirely with JavaScript in your browser.
Length beats complexity
A long passphrase of random, unrelated words (like “river-copper-willow-42”) is both easier to remember and harder to crack than a short string of substituted symbols like “P@ssw0rd1!”.
Uniqueness matters most
Reusing a password anywhere means a single breached site can expose every account that shares it. Every account should have a password no other account uses.
Use a password manager
A password manager generates and remembers unique, strong passwords for every site so you only have to remember one strong master passphrase.
Turn on MFA everywhere
Multi-factor authentication stops most account takeovers even if a password does leak. Start with your email account, since it’s often the recovery method for everything else.
Example passphrase generator
These are illustrative examples of the passphrase pattern, not secure passwords to actually use — generate your real passwords with a reputable password manager instead.