Lesson 1

Designing Strong Passphrases

Forget complex character requirements and move to long, memorable, and secure passphrases.

Complexity—using symbols and numbers—often creates passwords that are easy to guess. Instead, prioritize length. A passphrase of four or five unrelated words, such as 'purple-battery-staple-ocean,' is far more secure than a short string like 'P@ssw0rd1.' The math is simple: longer passwords take millions of times longer for hackers to crack using automated software. Aim for at least 16 characters. If you need a passphrase, use a random word generator or pick five words from a book. Do not use lyrics, quotes, or family names, as these are in hacker databases. Your goal is a sequence that has no logical connection. Avoid using the same passphrase across different websites. If one site gets breached, a single reused password puts your entire digital life at risk. You only need to memorise one 'master' passphrase for your manager; everything else can be long and randomised.

Create a free account to track your progress →