Use at least 16 characters, include all character types, and avoid using the same password across multiple sites. Each password is generated entirely in your browser and is never sent to any server.
- Length: at least 16 characters (longer is better)
- Complexity: mix of uppercase, lowercase, numbers, and symbols
- Uniqueness: use a different password for every account
- Randomness: generated with cryptographic entropy, not human-chosen