Password Security: How to Generate Unbreakable Passwords

Most 'password rules' are decades out of date. The science says: length and randomness beat forced complexity. Here's what actually protects you.

What makes a password strong?

Entropy — measured in bits — is the number of guesses an attacker needs. A 16-character random password from the full character set gives ~104 bits. A 8-character one with a '!' swapped in gives far less, because patterns like leetspeak are guessable.

Try the password generator

The rules that actually matter

• Use 16+ random characters for important accounts.
• Never reuse passwords across sites.
• Let a password manager store them for you.
• Enable two-factor authentication everywhere.
• Avoid personal info: names, birthdays, pet names.

FAQ