← Fundamentals of Cybersecurity

Lesson 27 of 34 Beginner ~8 min

Strong passwords and password managers

Welcome to the final module — the practical one. Everything here is something you can do today. We start with passwords, because they protect almost every account you own.

What is it?

A strong password is long and hard to guess. A password manager is a secure app that creates, stores, and fills in a different strong password for every account — so you only have to remember one master password.

Architecture diagram
SVG
Strong passwords & password managersA strong password is long and unique. A password manager remembers them so you don't have to.WEAK PASSWORDWeak passwordEasy to guess or reuse✗ Short and simple✗ Reused everywhere✗ Based on personal infoSTRONG + MANAGERStrong + managerLong, unique, stored safely✓ Long passphrase✓ Different for each site✓ Remembered by a managerGhostLayer Insights · example lab architecture

Select any component in the diagram to read what it does.

What makes a password strong.
Text description of this diagram

A strong password is long and unique. A password manager remembers them so you don't have to.

Why is it important?

From Module 4 you know attackers brute-force, guess, and reuse passwords. Long, unique passwords defeat all three methods — but no human can remember dozens of them, which is exactly the problem a password manager solves.

How does it work? — the rules of a good password

  • Long — aim for at least 12–16 characters. Length matters most.
  • Unique — never reuse a password across accounts.
  • Unpredictable — avoid names, birthdays, and common words.
  • A great trick: a passphrase of a few random words, like correct-horse-battery-staple, is long and easy to remember.

Let a password manager do the hard work: it generates a long random password for each site and remembers them all. You just protect the one master password (and turn on MFA for the manager itself).

A real-world example

Before: someone uses Summer2024 everywhere, and a single breach exposes all their accounts. After: they set up a password manager, which gives every site its own 20-character random password. Now a breach at one site cannot touch any other, and they only remember one strong master password.

Check what you learned

What matters most in a strong password?

Length — a long password (12–16+ characters), especially a passphrase, is far harder to crack than a short complex one.

What problem does a password manager solve?

It lets you use a different strong password for every account without having to remember them all — you only remember the master password.

Key takeaways

  • Strong passwords are long, unique, and unpredictable.
  • A passphrase of random words is strong and memorable.
  • A password manager makes unique passwords for every account practical.