How long should a password be?

For important accounts, use at least 16 characters and make the password unique to that account.

Should I reuse passwords?

No. Reusing passwords makes one breach affect multiple accounts.

Secure Password Checklist

Q: Where should I store passwords?

Use a trusted password manager instead of notes, screenshots, spreadsheets, or chat messages.

The short version

Use long, unique passwords. Store them in a password manager. Turn on two-factor authentication for accounts that matter. The biggest win is not having to remember every password yourself.

Generate a strong password

Affiliate disclosure: this site may earn a commission from Coupang Partners links.

Use 16+ charactersLength protects better than clever substitutions like replacing letters with numbers.

Never reuse important passwordsEmail, banking, cloud storage, and work accounts should each have a unique password.

Avoid personal detailsNames, birthdays, addresses, sports teams, and phone numbers are easier to guess.

Save passwords safelyUse a password manager instead of notes, screenshots, spreadsheets, or messages.

Use two-factor authenticationAdd a second step for accounts that can reset other accounts or hold payment data.

Change passwords after riskRotate passwords after a breach alert, shared-device incident, or accidental exposure.

Password manager checklist Random password vs passphrase Instagram password generator Wi-Fi password generator

The short version

Related pages