How to Choose a Strong Password

Relax. We'll talk through this in plain words — no textbook voice.

What you'll walk away with

Understand how to choose a strong password, without any of the intimidation
Apply this concept right away in real-world scenarios
Learn to avoid security risks for both yourself and others

Let's think about this for a second

When it comes to password strength, length matters more than complexity (whether special characters are included) — a 16-character passphrase (like 'purple-mango-river-42') is harder to crack than an 8-character complex password ('P@ssw0rd!'). Uniqueness matters too — if you use a different password for every service, a leak at one service won't put your other accounts at risk.

Let's connect this to a real scenario

Predictable patterns like 'password123', '12345678', or your name plus a date can be cracked by attackers with a dictionary attack in seconds. Using a password manager (we'll cover this in a later chapter) generates a long, random password for each service so you don't have to remember them — the only thing you need to remember is a single master password.

Make it longer than 12 characters (length beats complexity)
Use a different password for each service
Avoid plain names, dates, or dictionary words

Let's walk through it together

text

Weak:    password123
Weak:    MyName1990
Strong:  correct-horse-battery-staple-42
Strong:  (password manager ကနေ random generate လုပ်ထားသော)

You should see

You'll be able to explain the length/predictability trade-off of passphrase-style passwords.

Try it in 5 minutes

Pick a password you currently use, decide whether it's 'weak' or 'strong,' and write down why.

A quick word of caution

Never store passwords as plain text on browser sticky notes or in a text file — use an (encrypted) password manager instead.

Easy traps

Thinking that meeting a complexity requirement (special characters) alone makes a password secure — length matters more
Reusing the same password across every service

Now try it yourself

Pick a password you currently use, decide whether it's 'weak' or 'strong,' and write down why.

You'll know it worked when: You'll be able to explain the length/predictability trade-off of passphrase-style passwords.