The strongest practical password is usually long, random and used for exactly one account. Complexity rules can help, but predictable patterns and reuse remain dangerous even when a password contains symbols and numbers.
Prioritise length and uniqueness
A longer random password has more possible combinations than a short one. More importantly, a unique password prevents a breach at one service from automatically exposing another account.
Do not build every password from the same base word with a different site name. That pattern can be guessed once one version becomes visible.
Avoid human patterns in random-looking passwords
Replacing an A with @ or adding 123! to a familiar word is common and therefore predictable. Personal dates, names, keyboard walks and famous quotations are also poor sources of randomness.
A generator using cryptographic randomness can select from a large character pool without these habits. Use the longest length the account and your password manager comfortably support.
Store passwords in a password manager
A reputable password manager lets you keep different random credentials without memorising every one. Protect the manager with a strong master password and enable multi-factor authentication when available.
- Use one password per account.
- Turn on multi-factor authentication.
- Keep recovery codes in a secure place.
- Change a password promptly after a relevant breach alert.
Generate locally and handle the result carefully
Kitalva's Password Generator uses the browser Web Crypto API and does not intentionally send generated passwords to a server. After copying, store the password directly in your manager and avoid leaving it in notes, screenshots or chat messages.