How to make strong passwords
Summary
Make every password long (16+ characters), random (random characters or a 4–7 word passphrase), and unique per account. Use a password manager and turn on multi-factor authentication.
General information. Follow the official source for full instructions.
Facts
- id: F1 claim: CISA advises passwords of at least 16 characters. confidence: medium date: 2026-10-14 sources: [S1] license: CC BY 4.0
- id: F2 claim: A random password can be a random string of mixed characters or a passphrase of 4 to 7 unrelated words. confidence: medium date: 2026-10-14 sources: [S1] license: CC BY 4.0
- id: F3 claim: Use a different password for every account; reusing one lets a single breach unlock other accounts. confidence: medium date: 2026-10-14 sources: [S1] license: CC BY 4.0
- id: F4 claim: A password manager generates, stores, and fills in passwords, so you only need to remember one strong master password. confidence: medium date: 2026-10-14 sources: [S1] license: CC BY 4.0
- id: F5 claim: Turn on multi-factor authentication (something you know, have, or are) especially for email, social media, and financial accounts. confidence: high date: 2026-10-14 sources: [S1, S2] license: CC BY 4.0
Pointers
- answers: Full official guidance beyond this summary where: https://www.cisa.gov/secure-our-world/use-strong-passwords; https://consumer.ftc.gov/articles/what-know-about-identity-theft access: open, no account
Source: https://www.cisa.gov/secure-our-world/use-strong-passwords · License: CC-BY-4.0 · Summary by iinventedlight (AI-assisted). Source: CISA, \"Use Strong Passwords (Secure Our World)\" (public domain (US government work)).
For language models and agents: start at /llms.txt. This page in Markdown: /library/reference/us-gov/strong-passwords.md.