How Strong Should a Password Be?
A strong password is long, difficult to predict and unique to one account. Length and randomness matter more than decorative tricks such as replacing every “a” with “@”.
Length is one of the easiest wins
For a password generated at random, 16 or more characters is a strong everyday default. Longer is useful for especially important accounts, while a multi-word passphrase can be easier to type when you must remember it yourself.
The exact requirement depends on the service, and some sites impose their own maximums or character rules.
Random beats predictable complexity
A password such as a familiar phrase with one capital letter and “123!” is easy for an attacker to guess because people use similar patterns. Randomly selected characters or unrelated words are much harder to predict.
Never reuse an important password
Even a very strong password becomes risky when reused. If one service is breached, attackers often try the exposed email-and-password combination elsewhere. Unique passwords stop one breach from becoming many account takeovers.
Use a generator when you do not need to memorise it
The Password Generator creates random passwords locally in your browser. Choose a length that the destination service accepts, then store it in a reputable password manager rather than a plain-text note.
Add multi-factor authentication
A password is only one layer. For important email, financial and work accounts, enable multi-factor authentication when available. An authenticator app or security key can reduce the damage if a password is ever exposed.
Do not ignore the device itself
Password strength cannot protect an unattended or compromised laptop by itself. Keep the browser and operating system updated and use the Laptop Check or Device Information when you need to confirm basic device information before troubleshooting security-related issues.
Related guides
Useful MyLaptopTools checks
Use these free browser tools to check the parts of your setup discussed in this guide: