What is Password?
Password is a secret string of characters used to authenticate a user's identity and grant access to protected systems, accounts, or data.
Quick Facts
| Full Name | Password / Passphrase |
|---|---|
| Created | 1960s (computer passwords) |
How It Works
Passwords are the most common form of authentication in computing. A strong password typically combines uppercase and lowercase letters, numbers, and special characters. Modern security practices recommend using password managers, enabling two-factor authentication, and creating unique passwords for each account. Password strength is measured by entropy, which increases with length and character diversity.
Key Characteristics
- Secret string known only to the user
- Used for authentication and access control
- Strength depends on length and complexity
- Should be unique for each account
- Often stored as cryptographic hashes
- Can be enhanced with two-factor authentication
Common Use Cases
- User account authentication
- Encrypting files and data
- Protecting wireless networks
- Securing API access tokens
- Database and system administration
Example
Loading code...Frequently Asked Questions
How long should a secure password be?
A secure password should be at least 12-16 characters long. Longer passwords exponentially increase the time required for brute-force attacks. Consider using passphrases (4+ random words) which are both secure and memorable, such as 'correct-horse-battery-staple'.
Should I use a password manager?
Yes, password managers are strongly recommended. They generate strong, unique passwords for each account, store them securely encrypted, and auto-fill login forms. Popular options include 1Password, Bitwarden, and LastPass. This eliminates password reuse, a major security vulnerability.
How often should I change my passwords?
Current best practices no longer recommend regular password changes unless there's a breach. Instead, focus on using strong, unique passwords with two-factor authentication. Change passwords immediately if you suspect compromise, a service reports a breach, or you've shared it with someone.
What is two-factor authentication and should I use it?
Two-factor authentication (2FA) requires something you know (password) plus something you have (phone, security key) or something you are (biometrics). Always enable 2FA when available, especially for email, banking, and social media accounts. Authenticator apps or hardware keys are more secure than SMS codes.
How do websites store passwords securely?
Websites should never store passwords in plain text. Instead, they use cryptographic hashing algorithms like bcrypt, Argon2, or PBKDF2 with a unique salt for each password. When you log in, your entered password is hashed and compared to the stored hash, so the original password is never retrievable.