MultiConvers

How to Create a Strong Password

Use a unique, randomly generated password for each site, store it in a password manager, and prefer length over a clever substitution on a short word.

By Andreas Rosenberg

The short version

A strong password is one an attacker cannot usefully guess and that you do not reuse. Random generation plus a password manager beats a memorable phrase with ! on the end.

Steps that actually help

  1. Generate a new password. Do not recycle one from email, banking or social media.
  2. Make it long enough to store, not short enough to type from memory every time. See how long a password should be.
  3. Save it in a password manager. The manager is the memory; the site only sees the secret.
  4. Turn on multi-factor authentication where the account matters. A strong password is not a substitute for a second factor.

If you want a random string without creating an account, use the MultiConvers password generator. It runs in the browser and does not store the result.

What to skip

  • Keyboard walks (qwerty123) and name-plus-year patterns.
  • The same base word with a different digit per site.
  • Storing the only copy in a chat log or a synced notes file you do not treat as secret.

Extra symbols on a short password help less than adding length. That trade-off is length vs complexity.

FAQ

Is a passphrase better than a random string?

A long, uncommon passphrase can be fine if it is unique and not a famous quote. A generated random string of similar length is easier to make unique and harder to guess.

Should I change passwords on a schedule?

Change a password when it may have leaked or you reused it. Forced rotation of a strong unique password often leads to weaker patterns.

Related guides

Related tools

See all guides.