iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Make every password unique and at least 15 characters long if you create it yourself. For accounts that still require passwords, a password manager can generate and store a different long password for each one; enable multifactor authentication (MFA) wherever it is offered. If a service supports passkeys, consider using one instead of a password.
What makes a password strong?
Length and uniqueness are the practical priorities. A long password is harder to guess than a short one, and a unique password prevents a password exposed at one service from being reused to access another. There is no universal “time to crack” figure: outcomes depend on the password, the attack conditions, login protections such as rate limits, and how the service stores credentials.
NIST’s consumer guidance, published in 2025, advises making a password at least 15 characters long when you create one yourself. That is guidance for people choosing passwords, not a guarantee that any particular password is unbreakable. See NIST’s consumer password guidance.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsHow long should a password be, and what should it contain?
For technical requirements on services that verify passwords, NIST’s final SP 800-63B-4 standard, published in July 2025, distinguishes between passwords used alone and those used only alongside MFA:
#1 Best Overall
- 【Tired of constantly searching for or resetting your passwords?】 MOSA BEAR password keeper book is the perfect solution for you! This password book provides a dedicated place to securely store all your important website addresses, emails, usernames and passwords, ensuring your information is protected and easy to find. The well-designed log pages help you manage multiple accounts in a systematic way, saying goodbye to password confusion.
- 【Premium Design & Password Security】 The password book with alphabetical tabs features an anonymous cover design with no title on the cover, effectively avoiding information exposure. The password keeper design is specifically designed with password security in mind, providing space to record password hints instead of writing directly on the password itself, further protecting your important information.
- 【Simple Layout and Plenty of Space】The 160-page password logbook is designed to provide ample space to record passwords and other important information. It can store up to 414 passwords. In addition, it provides extra pages to record other information, such as email setup, card information, computer operating system information, software licenses, and more. The journal also includes 3 blank pages at the end for you to add additional notes.
- 【Palm-sized Size & Premium Quality】 This password notebook has an ideal size, 4.3" x 5.7", for carrying around, whether in a purse or pocket. Its sturdy glue binding allows the notebook to unfold smoothly and is more comfortable to use. The inner pages are made of high-quality 100GSM thick paper, which can effectively reduce ink penetration and ensure a cleaner and neater writing effect. The overall design takes into account both portability and durability, making it an ideal choice for recording important passwords.
- 【A-Z Tabs for Quick Search 】Our password book comes with alphabetical tabs to help you find the password you need quickly and easily. Alphabetically organized tabs ensure that you can quickly flip to the right section, saving you the time and hassle of searching for your password.
- A verifier must require at least 15 characters when a password is used as a single factor.
- For a password used only with MFA, a verifier may permit a shorter minimum, but not less than eight characters.
- Verifiers should allow maximum password lengths of at least 64 characters, accept spaces and printable ASCII, and accept Unicode.
These are requirements and recommendations for services, not a reason to choose the shortest password a website accepts. If you set your own password, use the consumer recommendation of at least 15 characters.
Do not rely on character-mix recipes
NIST says verifiers must not impose arbitrary composition rules such as requiring a mix of uppercase letters, numbers, and symbols. A symbol added to a short or predictable password does not make it a sound choice. Instead, choose something long and hard to guess, and avoid common, expected, or compromised passwords. The standard requires services to check new passwords against blocklists of those kinds.
Rank #2
- Never Forget Passwords Again: Record 468 passwords, with space for updates; Say goodbye to password woes! Secure Pass Keeper Book keeps you covered
- Secure Your Secrets: Discreet appearance, pocket-sized convenience; The ultimate keeper of privacy in your hands, sized at 4.1''x 5.8''
- Master your passwords with Alphabetical Tabs: 24 sections, each storing up to 18 passwords; Ample writing space to update and secure passwords; Add personal hints and notes for extra security; # Index tabs for frequently used passwords; Plus, lined note pages for convenient note-taking
- Enduring Vegan Leather: Exquisite Texture; 100 GSM Paper Resists Ink Bleed-through, Ensuring Long-lasting Value; Elevate Your Password Management
- Added Functionality: Sturdy Pen Loop, Elastic Band and Inner Pocket; Enjoy 180° Lay Flat for effortless writing, 360° Flipping for comfortable reading from any angle with spiral binding; A practical gift for family, friends, and partners
Use a passphrase if you need to remember it
A passphrase—a longer sequence of words—can be easier to remember than a short string of mixed characters. Make it distinctive rather than a familiar quotation, slogan, or predictable phrase. Do not reuse it on other accounts.
How to create and manage unique passwords
- Use a password manager for accounts that require passwords. Have it generate a long, random password for each account and save it there, rather than inventing and reusing passwords yourself. NIST recommends password managers because they can generate and store long, unique passwords.
- Protect the manager’s main account. Choose a long master passphrase and enable MFA for the manager if it offers it. The manager’s recovery arrangements matter too: understand how you would regain access if you lose a device or forget the master passphrase. Different managers handle security and recovery differently; do not assume they all work alike. NIST’s SP 800-63 FAQ discusses these precautions.
- Save new passwords as you create or change accounts. Use the manager’s autofill or saved-password feature where appropriate. NIST’s standard requires verifiers to allow password managers and autofill.
- Do not reuse an existing password. If one service is breached, a unique password limits the chance that the exposed credential will work elsewhere.
Add MFA, or use a passkey when available
MFA asks for another proof of identity in addition to a password. It can help protect an account even if the password is compromised. NIST lists options including USB security keys, authenticator apps, push notifications, and text codes; these methods vary in security. Turn on MFA for important accounts wherever the service supports it, and use the method the service and your devices can support.
Rank #3
- 【Tired of constantly searching for or resetting your passwords?】 MOSA BEAR password keeper book is the perfect solution for you! This password book provides a dedicated place to securely store all your important website addresses, emails, usernames and passwords, ensuring your information is protected and easy to find. The well-designed log pages help you manage multiple accounts in a systematic way, saying goodbye to password confusion.
- 【Premium Design & Password Security】 The password book with alphabetical tabs features an anonymous cover design with no title on the cover, effectively avoiding information exposure. The password keeper design is specifically designed with password security in mind, providing space to record password hints instead of writing directly on the password itself, further protecting your important information.
- 【Simple Layout and Plenty of Space】The 160-page password logbook is designed to provide ample space to record passwords and other important information. It can store up to 414 passwords. In addition, it provides extra pages to record other information, such as email setup, card information, computer operating system information, software licenses, and more. The journal also includes 3 blank pages at the end for you to add additional notes.
- 【Palm-sized Size & Premium Quality】 This password notebook has an ideal size, 4.3" x 5.7", for carrying around, whether in a purse or pocket. Its sturdy glue binding allows the notebook to unfold smoothly and is more comfortable to use. The inner pages are made of high-quality 100GSM thick paper, which can effectively reduce ink penetration and ensure a cleaner and neater writing effect. The overall design takes into account both portability and durability, making it an ideal choice for recording important passwords.
- 【A-Z Tabs for Quick Search 】Our password book comes with alphabetical tabs to help you find the password you need quickly and easily. Alphabetically organized tabs ensure that you can quickly flip to the right section, saving you the time and hassle of searching for your password.
A passkey is another option where a service offers it. NIST says passkeys avoid the need to memorize a password and are difficult to steal through phishing. They are not available everywhere, and whether you can use one depends on the service and your devices. Passwords may remain necessary for accounts or situations that do not support passkeys. NIST summarizes the constraint: “Passwords are not phishing-resistant.”
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When should you change a password?
Change a password when there is evidence it has been compromised—for example, when a service tells you that your account was affected or you discover an unauthorized sign-in. NIST’s standard says verifiers should not force periodic password changes without evidence of compromise, but should require a change when compromise is indicated. If a password was reused, replace it on every account where it appears with a separate, unique password.
Quick Recap
Best Value
- No more Password Aggravation：This book will simplify your electronic life and free you from the constant frustration of trying to remember and reset your passwords. You can record longer and more complex passwords and never forget them again.
- Alphabetical Tabs (A-Z): We upgraded to one letter one tab（A-Z）,others are two letters share 5 pages（AB-YZ). Our password journal has 6 pages per alphabetical tab. Makes your password easy to find and keeps organized.
- Plenty of Space for Information: Each tab has 6 pages with 3 entries per page, it can contain over 414 passwords. There're additional pages, PC info, email settings and 8 pages of notes. We have reserved a place to write a password hint instead of the password itself to ensure password security.
- 100GSM No-Bleed Paper: This password notebooks are made of very thick 100gsm paper, no bleed through. Size 4.3in x 5.7in, suitable size for carry-on. 180°lay flat so it’s easy to write in.
- Excellent Gift to All Ages：Easy to use, keeps passwords organized. With an elastic band, pen holder, bookmarker and inner pocket. A great present for friends and family.
Rank #4
- Individual A-Z Tabs for Quick Access: No need for annoying searches! With individual alphabetical tabs, this password keeper makes it easier to find your passwords in no time. It also features an extra tab for your most used websites. All the tabs are laminated to resist tears.
- Handy Size & Premium Quality: Measuring 4.2" x 5.4", this password notebook fits easily into purses or pockets, which is handy for accessibility. With sturdy spiral binding, this logbook can lay flat for ease of use. 120 GSM thick paper to reduce ink leakage.
- Never Forget Another Password: Bored of hunting for passwords or constantly resetting them? Then this password book is absolutely a lifesaver! Provides a dedicated place to store all of your important website addresses, emails, usernames, and passwords. Saves you from password forgetting or hackers stealing.
- Simple Layout & Ample Space: This password tracker is well laid out and easy to use. 120 pages totally offer ample space to store up to 380 website entries. It also provides extra pages to record additional information, such as email settings, card information, and more.
- Discreet Design for Secure Password Organization: With no title on the front to keep your passwords safe, it also has space to write password hints instead of the password itself! Finished with an elastic band for safe closure.
Common password mistakes to avoid
- Reusing one password: a breach at one service can put other accounts using that credential at risk.
- Making a short password look complicated: arbitrary capitalization or symbols do not replace adequate length.
- Choosing an obvious phrase: familiar quotes, common passwords, or personal details can be easier to guess.
- Changing passwords on a calendar while leaving compromised ones in place: respond to evidence of compromise, and use unique credentials from the start.
- Skipping MFA because the password is long: a strong password and an additional factor address different parts of account security.
