Three random words — by NCSC (UK)

beginnerpageLink only (©)

The NCSC shows how chaining three unrelated words makes a password that is hard to crack but still memorable. It also warns against personal details and predictable character swaps, and mentions password managers as an alternative.

Quick steps

Combine three random words into one password
Avoid common passwords and personal details like birthdays or pet names
Do not rely on swapping letters for symbols
Writing a password down is fine if kept somewhere safe

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full article on ncsc.gov.uk

Source: Three random words by NCSC (UK). Licence: Link only (©).

Source reviewed: 2026-11-02
Link checked: 2026-11-02
Tested hands-on: Not by Oddbyte.Me

passwordspassphrase

More in Passwords & 2FA

Creating Strong Passwords — by Electronic Frontier Foundation

beginnerpage

Part of EFF's Surveillance Self-Defense guide. It argues for a different password on every account to limit damage from leaks, with a password manager doing the work, and a random multi-word passphrase for high-value logins such as your device and the manager itself.

Managing your passwords — by NCSC (UK)

beginnerpage

Advice on using a unique strong password per account and why to enable two-step verification first. Describes how browser-based and third-party password managers store, generate and autofill passwords and can warn about breaches.

Turn on 2-step verification (2SV) — by NCSC (UK)

beginnerpage

Explains how a second check at login keeps criminals out of email, banking and social media accounts even if they have your password. Points to setup guides for popular services such as Gmail, Outlook, Instagram, Amazon and Apple ID.