Simple passwords like "123456" or common identification details like birthdays and nicknames are not secure for protecting important accounts containing personal data.

There's a common myth that passwords should be changed at specific intervals. However, this isn't recommended, as frequent changes can lead to weaker passwords being used or old passwords being reused.

Of course, it is also recommended to use password management software.

Below are some recommendations from the american cybersecurity agency CISA for creating a secure password. A secure password should meet all three criteria:

A secure password should be at least 16 characters long – the longer the password, the more secure it is.

Use random strings consisting of lowercase letters, uppercase letters, characters, and numbers. For example:

Alternatively, you can use so-called "passphrases." These consist of non-contiguous words, characters, and numbers. For example:

As a general rule, you should use a different password for each account. For example: