How to create strong passwords

Length matters more than complexity — a long passphrase of unrelated words is often stronger and easier to remember than a short string of symbols.

Every important account should have its own unique password. Reuse is the biggest single risk, since a breach at one site can unlock accounts elsewhere.

A password manager can generate and store unique passwords for you, so you only need to remember one strong master password.

Our Password Generator tool in the Toolkit can create strong random passwords locally in your browser.