Guidelines for choosing strong password

Choosing a strong and unique password is vital to ensure your account remains secure. If your password is weak (easily guessable) or commonly used, it increases the risk of your account being compromised.

To maintain the security of your account, we check the following when you change or set your password:

  1. The password is strong and complex.
  2. The password has not been found in any online data breaches.

If your password fails these checks, you will receive one of the following error messages:

  • This password has been previously found in a data breach. Please choose a more secure password.
  • That password is too weak; please choose a stronger password.

Password security management

Password Managers

The most secure and convenient way to manage passwords. Generates and stores strong, unique passwords automatically.

Three Random Words

A simple alternative method for creating memorable yet secure passwords when password managers aren't available.


We recommend you use a password manager for generating and storing your passwords. This is the most secure and convenient way to manage passwords. Used properly, it completely eliminates the risk of using a weak or commonly used password.

Password managers are built into most browsers. Alternatively, there are free and paid third-party solutions available.

Password manager guidelines

When generating a password from a password manager, follow these guidelines:

  • Increase the length: Set longer passwords (20+ characters), as they are generally more secure.
  • Include all characters: Incorporate numbers, special characters, and upper and lower case letters.
  • Make it unique per site: Always generate a new, unique password for each site.