By Tim O. · September 16, 2026 · 6 min read
Strong Password Examples: What Strong Looks Like
Last verified: September 16, 2026
A strong password is a long, random string that you use on only one account. Fifteen characters meets current NIST guidance for a password that stands on its own. Sixteen is the length CISA recommends. Randomness means a generator picked it, not a phrase, a pet, or a year.
The samples below show that pattern: mixed letters, digits, and symbols, with no words. They are illustrations, not passwords. Anything printed on a public page is already in search indexes.
Do not use any example on this page as a real password. Every string shown here is public, including the masked shapes. If you copied one, change that account today.
Make a private password in your browser with the password generator, or tap a "generate a fresh one like this" button next to a pattern. Then save it in a password manager. Never paste a webpage example into a bank, email, or Wi-Fi login.
Make your own in one click
This password is created on this page. It is not sent anywhere. Click when you are ready. Then copy it into a password manager before you close the tab.
What makes a password strong?
Three things, and you need all three:
- Length: 15 characters meets current NIST guidance for a password on its own. CISA recommends 16.
- Randomness: a generator, not a phrase you invented.
- Uniqueness: one password, one account.
The impossible ask is memorizing two hundred of those. That is why people copy examples. A password manager is the way out, not a better memory.
Masked examples: the shape, not a password
The middle is hidden on purpose. These rows illustrate a pattern. They are not passwords you can finish by guessing. Click the button next to a row to make a unique password of that length in your browser. It never leaves this page.
| Length | Pattern (public, do not copy) | What you should see |
|---|---|---|
| 12 |
k9#m••••••jr5
|
Letter, digit, symbol, mixed throughout |
| 15 |
3rt#•••••••!6pq
|
NIST minimum length, still random |
| 16 |
k9#m••••••••8*jr5
|
CISA recommended length |
Pattern breakdown
Take the 16-character masked sample. This is structure, not a hint you can finish by guessing.
| Piece | Shape | Why it is there |
|---|---|---|
| Start | letter, digit, symbol, letter | Mix from the first four characters |
| Middle | hidden | Length. Not a word you can memorize |
| End | digit, symbol, letters | Mix at the end, not 123 |
Sites that block symbols need extra length instead. Use the generator, turn symbols off, and add a few characters.
Strong password vs weak password
People search for hard password examples and then copy the first string that looks complicated. Complicated is not the same as strong. A weak password is short, based on a word, or reused. A strong one is long, random, and used once.
| What to compare | Strong pattern | Weak example (do not use) |
|---|---|---|
| Length | 15 or 16 random characters | 8 letters and a bang, like P@ssw0rd |
| Letters and digits | Mixed throughout, no words | A word plus digits at the end, like password123 |
| Uniqueness | One password, one account | The same seasonal string on every site, like Summer2024! |
The weak column stays because it teaches. Those strings are in every cracking list. If one of them is still in use on an account you care about, change it.
Weak examples: these teach what to avoid
Every weak sample below is labeled weak. They are the first strings cracking tools try. They stay because they teach. Do not use them either.
| Weak password | Why it fails | Do this instead |
|---|---|---|
Summer2024! | Dictionary word, year, and a symbol | Make a new random password |
password123 | The word plus numbers at the end | Make a new random password |
P@ssw0rd | Common letter substitutions | Make a new random password |
john1987! | A name and a birth year | Make a new random password |
Where to keep the new password
A 16-character random string is not something I would ask my mother to memorize. I would ask her to save it in a password manager and remember one master passphrase.
NordPass is the one I recommend when someone is not comfortable with computers. It is easier to live with than the more powerful tools. That is the whole reason.
Affiliate link. If you buy NordPass through this link, SafePasswordGenerator.net earns a commission. It does not change what you pay.
See NordPass pricingIf you are helping a parent, read the easiest password manager for parents. For length research, see the password length guide.
Frequently asked questions
Can I use these password examples for my accounts?
No. Any password printed on a website, including this one, is already public. Make a new one with the button above.
I already used a password I copied from this page. What should I do?
Change it today. If you found this page by searching that password, other people can search it too. You are not late. You are fixing it now.
What does a very strong password look like?
Sixteen or more random characters, all four character types, no words. The masked samples show that shape. Click Make a password for a private one.
What is a strong password with numbers?
Numbers sit throughout the string, not at the end. Avoid patterns like password123.
How do I make a strong password I can remember?
Use a passphrase from the memorable password generator. Do not use the famous four-word comic example. It is in every cracking list.
What is a strong password example?
It is a pattern: 15 or 16 random characters, mixed letters and digits (and symbols when the site allows them), used on one account. The masked rows above show that shape. They are not passwords you can copy.
How long should a password be?
Fifteen characters when a site will not take more. Sixteen when it will. Length only counts if the password is random. See the crack-time table for the brute-force numbers.
Is an 8-character password strong?
No. Use eight only when a site forces it, mix all four types, and turn on multi-factor authentication. Prefer 15 or 16 when the site allows it.
Are 15 or 16 character passwords strong enough?
A random 15-character password with letters, numbers, and symbols takes about 15 billion years to brute-force on a fast hash, per the crack-time table. A random 16-character password of the same type takes more than a trillion years. Neither is strong if you invent it or copy it from this page.