How to create a strong password

Strength comes mostly from length and randomness, not from clever substitutions such as turning an a into an @.

Use length

Aim for at least 14 characters, and 16 or more for email, banking and your password manager.

Make it random

Names, dates and favorite words are easy to guess. Generate passwords with the password generator, which uses your browser’s secure random source. A passphrase of four or more unrelated random words is a good option when you must type it by hand.

Never reuse

If one site leaks a password, attackers try it everywhere. Use a different password for every account and keep them in a password manager.

Add a second step

Turn on two-factor authentication where it is offered, especially for email, because email resets every other account.