Use Strong Passwords — by CISA

beginnerpageLink only (©)

CISA explains why short or guessable passwords make accounts easy to break into, using a short story about a reused password. It recommends long, unique passwords generated and stored by a password manager.

Quick steps

Make each password at least 16 characters
Use random characters or a passphrase of unrelated words
Use a different password for every account
Let a password manager create and store them
Turn on multifactor authentication, starting with email, social media and financial accounts

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full article on cisa.gov

Source: Use Strong Passwords by CISA. Licence: Link only (©).

Source reviewed: 2026-11-02
Link checked: 2026-11-02
Tested hands-on: Not by Oddbyte.Me

passwordspassword managersecure our world

More in Passwords & 2FA

Creating Strong Passwords — by Electronic Frontier Foundation

beginnerpage

Part of EFF's Surveillance Self-Defense guide. It argues for a different password on every account to limit damage from leaks, with a password manager doing the work, and a random multi-word passphrase for high-value logins such as your device and the manager itself.

Managing your passwords — by NCSC (UK)

beginnerpage

Advice on using a unique strong password per account and why to enable two-step verification first. Describes how browser-based and third-party password managers store, generate and autofill passwords and can warn about breaches.

Three random words — by NCSC (UK)

beginnerpage

The NCSC shows how chaining three unrelated words makes a password that is hard to crack but still memorable. It also warns against personal details and predictable character swaps, and mentions password managers as an alternative.