11 live
Password basics
A zero-level start: what passwords are, how long they should be, and how to make good ones.
Open Guide
Part 1 of 25th Word
Everyday passwords: a plain-language security guide
Your email, bank and shopping accounts all depend on a few secrets. Learn what makes a password strong, how to manage them all, and what to do when something goes wrong.
60 of 60 guides live
6 topics
We never ask for your secrets
Main guides
Choose a topic
For anyone with an email or bank login. No technical or crypto knowledge needed.
10 live
Password managers
How password managers work, how to choose one, and how to set one up safely.
Open Guide
10 live
Two-factor login and passkeys
A second lock on your accounts: authenticator apps, security keys and passkeys.
Open Guide
10 live
Data breaches and hacked accounts
How passwords leak, how to check yours, and what to do when an account is hit.
Open Guide
10 live
Securing your key accounts
Lock down the accounts that matter most: email, banking, phone and home network.
Open Guide
9 live
Passwords for families and digital legacy
Keeping kids, parents and partners safe, and leaving a plan for those you love.
Open Guide
Popular
Latest guides
Zero level
What is a password, and why it matters
A password is a secret that proves an account is yours. Learn what passwords do, why they matter, and the habits that keep them safe.
Read Guide
Zero level
How long should a password be?
Aim for at least 16 random characters, or five or more random words. See what NIST and CISA advise and why length beats everything else.
Read Guide
Zero level
Password complexity: do symbols and numbers really help?
Symbols help only when a password is truly random. Learn why length beats complexity, and why NIST now tells sites to drop complexity rules.
Read Guide
Zero level
Password strength explained in plain words (what "entropy" means)
Password strength measures how many guesses an attacker needs. Learn what entropy means, why randomness matters, and how to compare passwords.
Read Guide
Zero level
What makes a password weak: the patterns attackers try first
See the weak password examples and patterns that attackers try first, from names and dates to keyboard walks and letter swaps, and what to use instead.
Read Guide
Zero level
Passwords vs passphrases: why a few random words beat P@ssw0rd
A passphrase is a password made of several random words. Learn why it beats P@ssw0rd, how many words you need, and when to use one.
Read Guide
One idea, two kinds of secret
Everyday passwords
Email, bank and shopping logins. Can usually be reset.
The passphrase
Many random words, used in both worlds. The bridge between the two.
Crypto secrets
Recovery phrases and private keys. Cannot be reset.
Also on 25th Word: Crypto secrets. For anyone holding crypto: recovery phrases, backups, hardware wallets and the 25th word.