Strong Passwords and Passphrases

Prefer length and uniqueness

Attackers often try common passwords and credentials leaked from other sites. A long passphrase of several unrelated words is easier to remember than a short complex string, and uniqueness matters as much as strength: never reuse a password across important accounts.

Build a practical passphrase

Choose words you did not copy from a famous quote or song lyric, then add a personal twist that is not public information.

Example shape (do not copy this):
orange-lantern-river-quilt-42

Use a password manager

A reputable password manager generates and stores unique passwords, autofills them in the browser or app, and syncs across your devices under one strong master passphrase. That lets every site have a different secret without memorizing dozens of strings.

Handle recovery carefully

• Store recovery codes offline or in the password manager’s secure notes
• Never share passwords in chat, email, or screenshots
• Change a password immediately if a service reports a breach affecting that account
• Avoid writing master passwords on sticky notes attached to the device