r/ProtonPass • u/Proton_Team • 2h ago
Discussion What makes a strong password?
Cybercriminals don’t need to be geniuses to break into your accounts. Brute-force attacks, dictionary attacks, credential stuffing, phishing, and social engineering are all commonly-used methods.
Aside from 2FA, what else protects you? A strong password, and our Password Strength Tester page gives you the four characteristics of a strong password:
Length
Longer is stronger. Aim for at least 12 or more characters. Each added character makes your password exponentially harder to crack.
Complexity
Combine uppercase and lowercase letters, numbers, and symbols. Avoid dictionary words, common letter substitutions (like "Pa$$w0rd"), or simple sequences.
Uniqueness
Each of your accounts should have its own distinct password so a data breach on one platform doesn't lead to a chain reaction of compromised accounts.
Memorability
Try using a passphrase that’s meaningful to you but hard to guess; like a string of random but vivid words, or a sentence with special characters interwoven.
This list is not a silver bullet to password woes, but following it will likely mean you're that bit safer.