How long should a password be?
A 12-character password using all four character sets has about 78 bits of entropy. For important accounts, use 16 or more. Every extra 10 bits makes brute-force guessing roughly 1,000 times harder.
Passphrases
A passphrase strings together random common words. Five words from the roughly 1,500-word list give about 53 bits, easier to type and remember than a short jumble of symbols. Add a number for extra strength.
Good habits
- Use a different password for every site.
- Keep them in a password manager and turn on two-factor authentication.
- If a site blocks symbols, make the password longer instead.