Latest guide · Passwords
Passphrase or random password? The math behind both
How strong a six-word passphrase really is compared with a random 16-character password, and which one to use for what.
Plain-language guides to passwords and account security, with the numbers behind the advice.
More guides
How long should a password be? What NIST says in 2025 and why
NIST SP 800-63B-4 asks for at least 15 characters for passwords used on their own and drops complexity rules and forced resets. Here is the reasoning, with the numbers.