"Use a strong password" is easy to say, hard to do. This post gives practical, no-nonsense tips — and a free tool that does the hard part for you.
1. What makes a password strong
Strength is about entropy — how many possibilities an attacker must try. Two levers:
- Length: the single biggest factor. 12+ characters is a good floor; 16 is better.
- Variety: mix upper, lower, digits and symbols. Avoid dictionary words and obvious substitutions (
P@ssw0rdis weak).
2. Random string vs passphrase
A random string (K7#mP9qL!v2xQ) is max-entropy but hard to remember. A passphrase (four+ random words, correct-horse-battery-staple) is long, high-entropy, and easier to recall. Both work; pick what you can actually use.
3. The only rule that matters: don't reuse
One strong password reused everywhere is one breach away from disaster. Use a password manager to keep a unique random password per site. You only remember the manager's master password.
4. Generate one free, in your browser
Jisubao's generator creates a high-entropy random password with your chosen length and character sets. It runs locally in your browser — the password is never sent anywhere. Set length to 16, tick all four sets, and click generate.
👉 Try it now: Jisubao Password Generator →
5. Quick don'ts
- Don't use birthdays, names, or "123456".
- Don't write passwords in plain text files.
- Enable 2FA wherever offered — it beats any single password.