Exclude company/institution name, as well as abbreviations of the name.Exclude words found in a password blacklist – there are password blacklists that can be found on the Internet, or it is possible that a company / other institution may have their own password blacklists.Include symbols Exclude words involving the user's personal information.Below are some rules that can be used for creating a strong password: This largely involves constructing a strong password, but includes other aspects such as changing a password periodically, as well as being aware of, and avoiding the use of common passwords (password, 123456, qwert.). How to create a secure passwordĬreating a secure password can be achieved by following certain rules that are designed to increase password security. This includes controls such as two-step authentication for your password, or locking the account for a period of time after a given number of failed attempts. Security controls include safeguards that are in place to detect, avoid, or minimize security risks. For example, if a password involves a person's name, birthday, or other personal information that typically would not be very difficult to find out, the password would likely make for a weak password.Īside from the actual password, proper security controls play a significant role in reducing the risk of a security breach. This is affected by the length, complexity, and unpredictability of the password. Although it varies, usually, password strength is an estimate of how many trials would be required on average for someone to successfully guess the password. Password strength is a measure of how effective a password is against being guessed or against brute-force attacks.

As such, it is important to understand how to construct a strong password (or use a password generator) as well as to understand how to take measures to safeguard the password. In today's Internet age, it is likely that most people have experience with having a password for some kind of account. A password is typically a string of characters that may include letters, numbers, and symbols that can be used to access something, typically an account, and prevent others from accessing it.

Download 20 char password generator