Short, complex passwords feel more secure, but they’re actually easier for attackers to crack than long passphrases. That’s because modern attacks rely on automated tools that can try billions of combinations per second. Length matters more than complexity and each additional character dramatically increases the number of possible combinations.
Long passphrases also tend to be more memorable, which reduces risky behaviors like writing passwords down or reusing them across accounts. In contrast, short, complicated passwords are harder to remember and more likely to be reused or slightly modified, making them less secure overall.
One example of a long and secure passphrase is: Orang3$unset@TheBeach! (Don’t use this exact example as your password because it’s public now!)
If you'd like to learn more about cyber security best practices check out our Learning Center.
