How to create a strong password
A strong password is long, unique, and unpredictable. Create one by combining these rules—or skip the guesswork and use a password generator.
- Make it at least 14 characters (16+ for admin, email, and vault accounts).
- Mix character types, or use a multi-word passphrase instead of a short “complex” word.
- Never reuse it on another site.
- Store it in a password vault; memorise only the master password.
- Turn on 2FA on the account.
The same steps answer how to create strong passwords at scale: generate, store, never recycle.
What is a 14-letter password?
A 14-letter password (more precisely a 14-character password) is a secret that is fourteen characters long. Length is the main defence against offline guessing: each extra character multiplies the search space.
Fourteen is a solid minimum for generated passwords, which is why Hypervault’s generator talks about a 14-character baseline. It is not a special format. abcdefghijklmn is 14 letters and still weak. A 14-character string with mixed case, numbers, and symbols—or a longer passphrase—is what you want.
For a company vault, prefer 16+ characters. See EU password management practices.
Best practices to generate passwords
To help you generate passwords that are secure and protect your online accounts, here are some best practices that you should follow:
Use a long password
As mentioned above, a long password is more secure than a short one. The reason for this is simple: the longer the password, the more combinations of characters are possible, making it harder for hackers to guess or crack the password.
But how long is long enough? Aim for at least 14 characters. Use 16 or more for email, banking, admin, and the vault master password. Extra length is worth the effort.
If you're having trouble coming up with a long password, one trick is to use a passphrase instead of a single word. For example, "I love my cat Fluffy" is a stronger password than "cat." Just be sure to avoid using personal information or anything that could be easily guessed.
Use a mix of character types
Using a combination of different character types – such as uppercase and lowercase letters, numbers, and special characters – makes your password more secure. This is because it increases the number of possible combinations, making it harder for hackers to guess or crack the password.
For example, "P@$$w0rd" is a stronger password than "password" because it includes uppercase and lowercase letters, numbers, and special characters.
Avoid using personal information
It's important to avoid using personal information in your passwords, as this information can be easily guessed or found out by others. For example, don't use your name, birth date, or the name of a family member or pet.
Instead, use a combination of random characters and words that have no personal meaning to you. One way to do this is to use a passphrase, as mentioned above. Just be sure to avoid using any information that could be easily guessed or found out.
Don't reuse passwords
It's important to use a different password for each of your accounts. If you use the same password for multiple accounts and one of those accounts is compromised, the attacker will be able to access all of your accounts.
This can be difficult to manage, especially if you have a lot of accounts, but there are tools such as password managers that can help. A password manager is a tool that can generate passwords, strong and unique, so you don't have to come up with ideas. It can also help you keep track of your passwords and fill in login forms automatically.
Use a password manager
There are many password managers available, ranging from free to paid options. Our product, Hypervault, has a password manager and a password generator built in. Check also our comparrison guide where we review all features from the best known password managers in the world.
A password manager can save you time and hassle, and it can also help you create more secure passwords than you might come up with on your own. Just be sure to choose a password manager that is reputable and secure.
Enable two-factor authentication
Two-factor authentication (also known as 2FA) adds an extra layer of security by requiring you to provide a second piece of information, such as a code sent to your phone, in addition to your password. This makes it much harder for attackers to access your accounts.
Many online services and apps offer two-factor authentication, so be sure to enable it wherever it's available. Some common methods of two-factor authentication include SMS messages, authenticator apps, and security keys.
Conclusion
Generating strong, unique passwords is a basic step in protecting accounts. Follow the practices above, use a generator for everything except the master secret you memorise, and keep that master password in a class of its own.
