Passuno · Security guides
How long should a password be?
Length plays a major role, but the way a password was created also matters. A long predictable phrase is not automatically as strong as a randomly generated secret.
8–11 characters: avoid when possible
Shorter randomly generated passwords have fewer combinations than longer ones drawn from the same character pool. A service accepting eight characters does not necessarily mean eight characters is a good default.
12–15 characters: a context-dependent compromise
A random password of this length may be reasonable in some circumstances, but there is often little reason to stop there if your password manager can safely store a longer one. Follow the service’s rules without reducing randomness unnecessarily.
16–20 or more: a practical default
When supported, 16–20 random characters are a useful starting point for new passwords. Longer random strings are easy to maintain with a password manager and help you avoid reusing credentials.
Passphrases use a different approach
When a secret has to be memorized, independently selected words can be easier to handle. The security comes from the size of the selection list and the number of random choices, not just the count of letters displayed.
Passuno supports random passwords up to 128 characters and offers a separate cryptographic passphrase generator.