


Don’t use personal information, repetition or sequences in passwords.Make passwords long and as random as you can.Use separate passwords for at least email and banking, but preferably all your accounts.Where sites or apps require this, you can always add a symbol and number to a phrase, such as ‘CanteloupeRiverArtichoke+3’. Many sites ask for a mix of upper- and lower-case letters, numbers and symbols. For example, the password at the start of the para is considered very strong, but so is ‘CanteloupeRiverArtichoke’.

Most of the time, three or four random words as a phrase will create a really secure password. So where does that get us? ‘B7meapofngh04psnf’ is a strong password, but is a bit tricky to remember, so I’ll let you into a little secret. It is also crucial to avoid personal information – your name, parts of your address, date of birth, family members’ names and so on – as part of the password. You need to avoid repeated or sequential characters (like ‘aaa’ or ‘123’) in the password, as these weaken it.

Can you think what gets you into the strong category? Broadly, it’s more characters – the longer the better.īut it’s a little more complicated than that. So, what is a good password? You’ve probably seen a password security meter on some sites, where the password is rated from poor/weak to good/strong as you type it. The next problem becomes how to remember all these different passwords, and I’ll pick up on that with password managers, below. The NCSC highlights having a different password for your email as being the one to start with. However, I don’t do this for important things, like banking or email. But, like me, I bet you have some types of account that you use the same password for. Ideally, you should have a different password for each login. This is a good list to work through, and I’ve discussed some of these before, but I’m going to dig into others a little deeper.
