Strong passwords made simple: why a passphrase beats "P@ssw0rd1"

Most people believe a strong password must look like a puzzle: capital letters, numbers and symbols squeezed into eight characters. In reality, length matters far more than clever tricks. A password like "P@ssw0rd1" is short and follows patterns that attackers try first.

What makes a password weak

• It uses your name, birthday, phone number or football club.
• It is a common word with a few letters swapped for numbers.
• It is short, under ten characters.
• You use the same one on more than one account.

Use a passphrase instead

A passphrase is a string of random words, such as "orange-bridge-candle-river-lamp". It is long, easy to picture and very hard to guess. Choose words that are unrelated to each other and avoid famous phrases or song lines. Five or six words is a good target for important accounts.

One password per account

If one website is hacked, criminals try the same email and password on other sites. A unique password for each important account, especially email, banking and your earning platforms, stops one leak from becoming many.

How to remember them all

You do not need to memorise dozens of passphrases. Use a reputable password manager that stores them in an encrypted vault protected by one strong master passphrase. If you prefer not to use an app, a paper notebook kept in a safe place at home is better than reusing one password everywhere.

Protect your email first

Your email account can reset almost every other account. Give it your strongest passphrase and turn on two-step verification. If someone takes over your email, they can take over the rest.

Never share it

No bank, platform or "support agent" will ask for your password. If someone does, it is a scam. Also avoid typing passwords on shared or public computers.

When to change a password

Change it immediately if you suspect a leak, if you logged in on someone else's device or if you receive a warning from the service. Otherwise, a long unique passphrase does not need frequent changes.

A quick checklist

1. Make your email passphrase unique and long.
2. Use a different passphrase for each money-related account.
3. Switch on two-step verification.
4. Never type your password after clicking a link in a message.

Good password habits take an afternoon to set up and protect you for years.

Written by the EarnNaija team at EarnNaija Digital Technologies.

This article is general information, not financial or legal advice. Earnings are never guaranteed. See our fees page for the exact costs.