Length over complexity.
WHAT ACTUALLY MATTERS
Length, more than anything else.
A long simple passphrase is stronger than a short complicated string.
WHY
Attacks try enormous numbers of combinations.
Each additional character multiplies the work required.
WHAT COMPLEXITY RULES PRODUCE
Predictable substitutions: a zero for an O, a three for an E.
Attackers try those first.
WHAT A GOOD PASSWORD LOOKS LIKE
Long Unique to that account Not derived from anything about you
WHAT A WEAK ONE LOOKS LIKE
Your business name plus a year A word with predictable substitutions Anything short Anything used elsewhere
THE UNIQUENESS POINT
More important than strength.
A strong password used in several places is compromised everywhere when one service is breached.
HOW LONG
Longer than you think. Sixteen characters or more for anything important.
WHAT TO USE
Generated passwords from a password manager.
You do not need to remember them.
