Strong passwords don’t have to be hard to remember. A passphrase — a few random words strung together — is easier to type and much harder to crack than something like P@ssw0rd1.
Passwords are created in your browser and are never sent or saved anywhere. Passphrase words come from the EFF short word list (CC BY 3.0).
Password tips
- Use a different password for every accountEspecially your email and banking — one leaked password shouldn’t unlock everything.
- Longer beats complicatedFour or more random words is a great start.
- Turn on two-step verificationA code from your phone stops most account break-ins, even if a password leaks.
- Let a password manager remember themAsk us which one is right for you.
- Never share one-time codesNo real company will ask you to read one back to them.
Has your email been in a data breach?
Have I Been Pwned is a free, trusted service that tells you whether your email address has appeared in known data breaches. If it has, change the passwords for those accounts — and anywhere you reused them.