Module 1: Creating Strong Passwords

Progress: Module 1 of 2

🔐 Creating Strong Passwords

Passwords are your first line of defense. But most people still use weak passwords that can be cracked in seconds. Let's learn how to create truly strong passwords based on modern security guidelines.

Why Password Strength Matters

Cybercriminals use sophisticated tools that test millions of password combinations per second. A weak password like "password123" can be cracked instantly, while a strong 15-character password could take centuries.

Modern Guidelines: Length Over Complexity

Recent guidance from NIST has shifted away from complex requirements toward emphasizing length:

• Aim for at least 15 characters - Length is the most important factor
• Use passphrases - Combine 4-7 unrelated words
• Make each password unique - Never reuse across accounts
• Avoid personal information - No names, birthdays, or pet names

The Passphrase Method

The best way to create a strong, memorable password is using a passphrase—multiple unrelated words combined into one password.

These passphrases are:

• Long enough to resist brute-force attacks
• Easy to remember (they create a mental image)
• Difficult for others to guess
• Not found in password dictionaries

What to Avoid

Certain patterns are extremely vulnerable:

• Common passwords: "password", "123456", "qwerty"
• Sequential characters: "abc123", "12345678"
• Keyboard patterns: "qwertyuiop", "asdfghjkl"
• Personal info: Your name, birthday, phone number
• Single words: Even with substitutions like "P@ssw0rd"
• Repeated characters: "aaaaaa", "111111"

Password Reuse: A Critical Mistake

Using the same password across multiple accounts is extremely dangerous. When one service is breached, attackers try those credentials everywhere—a technique called "credential stuffing."

Using a Password Manager

Remembering dozens of unique passwords is nearly impossible. Password managers:

• Generate strong, random passwords for each account
• Store passwords securely in an encrypted vault
• Auto-fill credentials on websites
• Sync across all your devices
• Alert you to weak or reused passwords

Popular options: Bitwarden, 1Password, LastPass, Dashlane

Test Your Knowledge