How to create secure passphrases
Multi-factor authentication (MFA) is one of the most effective ways to protect your accounts from cybercriminals. However if MFA is not available, then you should consider using a strong password or passphrase to protect your account.
What is a passphrase?
A passphrase uses four or more random words as your password. For example, ‘crystal onion clay pretzel’ or 'red house sky train'. The longer the passphrase, the harder it is for adversaries to crack.
A unique, strong passphrase can better protect your account compared to a simple password.
To create a strong passphrase you should consider making it:
- Long.
- Unpredictable.
- Unique.
If a website or service requires a complex password including symbols, capital letters, or numbers, then you can include these in your passphrase.
Use a password manager to create and manage passwords
If you have multiple accounts with different passwords or passphrases, a password manager can help control them for you. A password manager is an application or program that stores passwords or passphrases for all of your accounts. With a password manager, you only need to remember one master password.
You can also use a password manager to create secure, long and randomly generated passwords. The longer and more random, the better. Make sure to generate a different password for every account.
Our practical publications
Take a look at our guides below for more detailed advice on how you can create secure passphrases and use a password manager, to further protect your online accounts and personal information.
Creating Strong Passphrases
The longer your passphrase, the better. As adversaries can crack a short password with very little effort or time, you can increase the time and effort it takes by using a passphrase instead.
Password managers
Learn how to create and store passwords in a secure location for your important accounts.
Passkeys
Secure your online account with a passkey