Blog
Notes on passwords
Plain explanations of strength, passphrases, managers and the standards behind them. Every article ends with a recipe you can use straight away.
Showing all articles
BasicsHow to make a strong password (and why length wins)Why a long random password beats a clever short one, and how many characters is enough.8 min readRecipe: Just oneExplainersEntropy, explained without the headacheWhat “bits” means, where the number comes from, and why patterns cost more than they look.9 min readRecipe: Build your ownComparisonsPassword manager vs generator: what each one doesA generator makes the password; a manager keeps it. You almost certainly want both.7 min readRecipe: Password managerStandardsWhat NIST’s password guidelines actually sayLength over composition rules, no forced resets, check against breached lists — in plain words.6 min readRecipe: Site rules