When choosing a password, you should avoid using passwords that:

  • are very common (e.g. dictionary words, the word "password" in any language, "abc123", "letmein", and "newpass");
  • are a simple word or phrase, combined with the current, or a recent year (e.g. "2014pass" and "new2015")
  • contain sequential numbers or keyboard patterns (e.g. "123456", "qwerty", "ytrewq", "aassdd", and "qweasd");
  • are based on a word with some letters replaced by similar-looking symbols (e.g. "p@ssw0rd" and "1l0v3y0u");
  • contain or are similar to your username, email address, or domain;
  • are based on personal information which can be obtained via social engineering tactics;
  • are used elsewhere (e.g. for other email services, forum registrations, online banking);

The guidelines listed below will help you choose a strong (good) password:

  • use a trusted password generator tool (e.g. the Random password generator available in the hosting Control Panel);
  • choose a password that is at least 8 characters long;
  • include a passphrase (a string that consists of multiple words), punctuation marks, numbers, and a mix of capital and lowercase letters;
  • include phonetic replacements (e.g. '2b' for 'to be').

After you choose a strong (good) password, it is important to keep that password secure. Here are some tips on how to achieve this:

  • use password manager software;
  • never tell anyone your password, especially via email or instant messengers;
  • do not write it down;
  • change it periodically;
  • do not use the same password for different websites/services;
  • enter your passwords only on verified or trusted websites and services;
  • use up-to-date anti-virus/malware software.