What makes a password strong
Length matters most. Every extra character multiplies the number of guesses an attacker needs. A random 16-character password with letters, numbers and symbols would take a fast computer millions of years to guess; an 8-character one can fall in hours. The strength line under the password shows an estimate in plain words.
Randomness is the other half. Names, birthdays, mobile numbers and words with @ for “a” are the first things attackers try, however long they are.
Passphrases: strong and easy to remember
A passphrase is four to six random words, like Garden-Pocket-Rival-Tulip7. It is long, so it is strong, but much easier to remember and type on a phone than random symbols. The words are picked at random from a list of 7,776 common English words published by the Electronic Frontier Foundation for exactly this purpose.
Habits that protect you more than any password
- Use a different password for every important account, so one leak does not open the others.
- Keep them in a password manager, such as the one built into Chrome, Safari or your phone, instead of a notebook or a WhatsApp chat.
- Turn on two-step verification for email, banking apps and social media.
- Never share an OTP or password with anyone who calls or messages you, whoever they say they are.
Is a password made on a website safe?
This one is made by your browser’s cryptographic random generator, the same one websites use to protect payments, and it never leaves your device. FileFitly does not see it, store it or log it. You can even turn off your internet after the page loads and it keeps working.
Questions people ask
How long should my password be?
At least 12 characters for everyday accounts, and 16 or more for email and banking. Passphrases of 5 or more words are also strong.
Why avoid look-alike characters?
O and 0, or l, 1 and I are easy to confuse when you read or type a password. Leave the option on if you will ever type it by hand.
Some websites reject symbols. What do I do?
Tick Only symbols most websites accept, or turn symbols off and add a few more characters instead.
Is the PIN option safe?
PINs are fine where wrong attempts are limited, like a phone lock or ATM card. Never use a PIN as an online password.