Chapter 5 · 5.1
Generating strong passwords and passphrases
Let your manager's generator come up with your passwords. Passwords people make up themselves almost always follow a pattern that attackers try first. To learn what a strong password really is, see the lesson What a strong password really is in the Staying safe online course.
What should you set?
| For | Advice |
|---|---|
| A website or mailbox your manager fills in for you | A random password of at least 15 characters. Longer is fine, for example 20 or more. You never have to remember it. |
| Something you sometimes have to type yourself, such as your computer password | A passphrase of five or six random words with a separator. |
| Your master password | A passphrase of five or six words (see Your master password: create it, store it and never lose it). |
Length makes a password much stronger than unusual characters. If a website doesn't accept a certain character, turn that character off and make the password longer.
In Proton Pass
The generator is also included in the free version.
- When you create a new account on a website, click the Proton Pass icon in the password field. Proton Pass suggests a strong password. Without a website, open the extension and choose Generate password. On Android, you'll find the Password generator in the app.
- Choose Random password or Memorable password. A memorable password is made up of words: that's a passphrase.
- For a random password: set the length to at least 15 and choose whether you want Special characters (!&*) and numbers (Include numbers (0-9)).
- For a memorable password: choose five or more words and a separator, for example Hyphens, Spaces or Periods. With Capitalize and Include numbers, you meet the requirements of websites that demand a capital letter or a number.
- Use the password. Proton Pass fills it in and, after you sign up, asks whether it may save the login.
Did something go wrong before you saved the login? Proton Pass keeps the passwords you generated for two weeks under Generated passwords.
In 1Password
- On a website, click in an empty password field. 1Password suggests a strong password. Choose Use Suggested Password to fill it in.
- Want to adjust something first? Click the 1Password icon in the field and choose the Password Generator.
- Choose a random password or a password made of words. Set the length to at least 15 characters, or choose five or more words.
- Fill it in and save the login when 1Password asks.
In the program or app, open an item, choose to edit it and click the button in the password field to create a new password. Use it and save the item. You'll find previously generated passwords in the extension under Password Generator History. If 1Password is set to Dutch, the generator can also use Dutch words.
At WebOké
For My WebOké, DirectAdmin and your mailboxes, you also use passwords from your generator. To find out which passwords come with your package and where to change them, see Secure passwords and what to do if a password leaks and Your WebOké passwords in your manager.
Tip: Don't update everything at once. Replace the passwords for your email, My WebOké and your bank first. To see which passwords are weak or reused, check Password health in Proton Pass and Watchtower in 1Password. Replace them whenever you log in anyway.