How to create a strong password in 2026

Your passwords are the keys to your online accounts, but creating strong, unique passwords for every account can quickly become a headache. The good news is that creating a strong password in 2026 doesn't mean memorizing complicated strings of random characters.

In this guide, I'll explain what makes a password secure, show you how to create strong passwords and passphrases, and explain how a password manager can make the whole process easier.

What is a strong password?

A strong password is one you can’t guess or crack using a brute force attack. Progress in the technological sphere leads to improvements in malicious hacker’s arsenal too. Therefore, strong passwords consist of a combination of uppercase and lowercase letters, numbers, and special symbols, such as punctuation. They should be at least 15 characters long or even longer.

Here are the main characteristics of a secure and strong password:

• At least 15 characters long or more
• Combination of uppercase and lowercase letters, numbers, and symbols
• Not based on personal information or common words
• Unique for each account you have
• Not reused or based on another password you use
• Random or difficult to guess

When you’re setting up an online account, there’ll often be prompts reminding you to include numbers or a certain number of characters. Some may even prevent you from setting a weak password, which is usually one word or number combination that’s easy to guess.

But even if you aren’t reminded to set a strong password, it’s imperative to do so whenever you’re setting up a new online account or changing passwords for any existing account.

How to create a strong password – 6 steps

There are numerous tools you can employ to create unique and strong passwords for all of your online accounts. The Cybernews team made password generator that generates unique and complex passwords. Even though there are online generators, it’s important to understand the basic rules of creating a strong password.

1. Use a password generator for strong passwords

If you don’t have time to come up with your passwords, a password generator is the perfect tool that can suggest a strong password quickly. Our in-house secure password generator will create a sequence of random characters. Copy and use it as a password for your device, email, social media account, or anything else that requires private access.

Some password creation tools also include hints on how to remember a particular password. For example, the output:

K4k'F@F#>v_[2.z>

Is accompanied by the following clue:

KOREAN 4 korean ' FRUIT @ FRUIT # > visa _ [ 2 . zip >

Alternatively, many reliable password managers, such as NordPass, also include password generators, so you can get a two-in-one service, which can help to not only generate passwords but keep them secure, too.

Visit NordPass

2. Create a strong passphrase

Passphrases can be a good alternative when you need to remember a password yourself. Instead of relying on a single word or predictable character substitutions, use several unrelated words to create a long, memorable phrase. The words should be chosen as randomly as possible and should not contain personal information.

There are no specific rules on how to create a strong passphrase because everyone’s preferences vary. Ideally, it should be something unique only you could come up with and remember. Here are some examples of how you can use the passphrase method to create strong passwords:

Phrase	Password
I first went to Disneyland when I was 4 years old and it made me happy	I1stw2DLwIw8yrs&immJ
My friend Matt ate six doughnuts at the bakery café and it cost him £10	MfMa6d@tbc&ich£10
For the first time ever, Manchester United lost 5:0 to Manchester City	4da1sttymevaMU5:02MC

Note: Don’t use common phrases, because these are vulnerable to dictionary attacks. Create random combinations that can't be guessed.

Try the Cybernews Password Generator

3. Opt for a more secure version of the dictionary method

A popular method for choosing a password is to open a dictionary or book and choose a random word. However, a single word is quite easy for a threat actor to guess, so it is best to choose a few words and string them together with numbers and symbols to make a strong password.

Here are some examples of good password ideas created with this method:

Words from the dictionary	Secure password
Jigsaw, quest, trait, fork	Jigsaw%Quest7trait/fork48
Glimpse, stuff, prize, koala	G1impse$tuff74Prize8Koala!
Trombone, fish, quick, upside	Tr0mb0ne&Fish?Qu1ck^side

4. Play around with phrases and quotes

If you want a password that’s difficult for others to guess, but easy for you to remember, it can be a good idea to use a variation on a meaningful phrase or quote. Simply take a phrase you’ll remember and swap out some of the letters for numbers and symbols.

Here are some examples of strong password ideas generated with this method.

Quote or phrase	Secure password
“One for all and all for one”: The Three Musketeers	14A&A413Mu$keteers!
“For the first time in forever”: Disney’s Frozen	4da1stTymein4eva-Frozen
“Twinkle twinkle little star, how I wonder what you are”: nursery rhyme	TW1nkle7ittle*how1??UR

5. Use emoticons

If you want to add symbols to your passwords without making them harder to remember, you can always use emoticons.

Although you won’t be able to add in emojis, you can use emoticons, which are coded versions, usually made up of punctuation, letters, and/or numbers.

Here are some emoticons that you can use in your passwords.

6. Customize your passwords for specific accounts

Once you’ve come up with a strong password that you can remember, you’ll still have to create different passwords for each of your online accounts. But, rather than starting the whole process again, you could simply add a different code to your password for each online account.

So, for example, if your password was cHb1%pXAuFP8 and you wanted to make it unique for your eBay account, you could add £bay on the end so you know it’s different from your original password but still memorable.

Here’s how that could work.

Online account	Password with added code
Email	cHb1%pXAuFP8EMa1l
Amazon	cHb1%pXAuFP8AZN
eBay	cHb1%pXAuFP8£Bay

Since all of the passwords are very similar, this is not an ideal solution, as it leaves your accounts vulnerable in case one of the passwords is guessed.

Strong password examples

Here are 4 really strong password examples:

• X5j13$#eCM1cG@Kdc
• %j8kr^Zfpr!Kf#ZjnGb$
• PkxgbEM%@hdBnub4T
• vUUN7E@!2v5TtJSyZ

As you can see, these passwords are pretty random and meaningless at first glance. While this makes them hard to memorize, they're also much more challenging for malicious hackers to crack. These passwords are strong because they are 15 characters long or even longer. Generally, all characters are in random order and contain both uppercase and lowercase letters and special characters, as well as numbers. They also don’t have any memorable keypaths or personal information that could help identify the password quicker.

How to keep your strong passwords secure

Now that you’ve set up a strong password for each of your online accounts, the next step is to keep them safe and secure from hackers or other cyberthreats. Here are some of our top tips for password safety:

The impact of data breaches on password security

Data breaches can expose sensitive information, including usernames, passwords, and other personal details. Even if you use strong, unique passwords, a breach of a service or website you use may lead to your credentials being stolen and exploited by cybercriminals. If your information is exposed in a breach, it’s critical to change your password immediately, not only on that service but across any other accounts where you may have reused the same password.

Many online platforms offer services that notify you when your data has been breached, which makes it easier for you to act quickly and mitigate damage. For maximum security, monitor your accounts regularly and be proactive about updating passwords when necessary.

You can also sign up for services like Have I Been Pwned to receive notifications if your email or account is found in a data breach. This allows you to take swift action and minimize any potential damage to your online security.

Secure your passwords

Conclusion

A strong password should be long, unique, and difficult to guess. If you need to create one yourself, aim for at least 15 characters and consider using a randomly generated passphrase. You don't need to rely on predictable combinations of uppercase letters, numbers, and symbols – length and randomness matter more.

For most people, the easiest approach is to use a reputable password manager such as NordPass or 1Password. A password manager can generate unique passwords for every account and store them securely, so you don't have to remember dozens of complicated credentials.

FAQ