Make a password you can actually remember

Long beats complicated. A password made of four or five random words is both easier to remember and harder to crack than something like Tr0ub4dor&3.

How to make one:

1. Pick 5 words at random. Really random: open a book on random pages, or use a word list with dice ("diceware"). Words you choose yourself are more guessable.
2. Join them, like lantern copper mitten gravel oasis.
3. Add a number or symbol if a site insists.

Rules that matter more than the password itself:

• Never reuse a password across sites. When one site leaks, attackers try that password everywhere.
• Use a password manager (Bitwarden, 1Password, or the one built into your browser or phone). Then you only need to remember one strong passphrase.
• Turn on two-factor authentication for email and banking.

You can check if your email showed up in a known leak at haveibeenpwned.com.