How to Create a Strong Password (Length Beats Complexity)

Metal padlock close-up
Photo: β€œ2013-365-43 Locked Out of the Theater (8470369166)” by cogdogblog Β· CC0 1.0 Β· via Wikimedia Commons

Short answer

Prefer a long unique passphrase (four or more random words) or a 16+ character random string stored in a manager. Never reuse passwords across banks, email and work.

β€œPassword123!” is complex-looking and still weak. Length and uniqueness matter more than sprinkling symbols. Generate secrets with the password generator.

What makes a password strong

Passphrase example pattern

Correct patterns look like random words from a large list: correct-horse-battery-staple style β€” but generate your own; never copy examples from articles.

2FA and recovery

Turn on two-factor authentication for email and banking. Keep recovery codes offline.

Developer notes

Apps should store password hashes, not passwords β€” see the hash generator for learning hashes (not for inventing your own login scheme). Use the UUID generator for IDs, not for passwords.

See also: what is a uuid.

See also: what is base64 encoding.

See also: how to fix invalid json.

More worked numbers

Change one input at a time so you build intuition. Write the formula, substitute values, then confirm with the free password generator. If the tool disagrees with your hand math, check units first (months vs years, percent vs decimal, inclusive ranges).

Common mistakes to avoid

How to practise

Invent three mini-problems from your own life β€” a bill, a grade, a trip, a loan quote β€” and solve them on paper before you open the calculator. Teaching the steps to someone else is one of the fastest ways to lock in the method.

After you finish this guide, explore the linked tools above and the related articles for neighbouring skills. Our calculators run privately in your browser with no sign-up, so you can check homework, budgets or work estimates without uploading data.

Quick reference card

Keep the short answer box at the top of this page as your cheat sheet. When a search result brought you here for a specific phrase, that box is designed to match the query with the formula first, then the examples below fill in the judgement calls.

Frequently asked questions

How long should a password be?

Aim for at least 16 characters or a four-word passphrase for important accounts. Double-check units and confirm with the linked tool on this page before you rely on the figure for money or school decisions.

Are periodic forced changes good?

Modern guidance prefers changing only after a breach or suspected leak. Double-check units and confirm with the linked tool on this page before you rely on the figure for money or school decisions.

Is a password generator safe in the browser?

Ours runs locally in your browser; still store results in a manager. Double-check units and confirm with the linked tool on this page before you rely on the figure for money or school decisions.

Should I write passwords down?

A written vault at home can beat reuse β€” but a manager with a strong master password is usually better. Double-check units and confirm with the linked tool on this page before you rely on the figure for money or school decisions.