Skip to content
Signing in

What makes a password acceptable?

At least 15 characters. Three or four unrelated words are easier to remember than a short one with symbols in it, and harder to guess.

It cannot be your email address, and it cannot be the word Sooqban.

It is checked against a public list of passwords known from data breaches. Only the first five characters of a cryptographic fingerprint leave our servers. The password itself never does, and the check cannot tell anyone which account it was for.

If a password is refused, the reason says which rule it failed rather than making you guess.

If this did not answer it: support inside your account is under development, and until it opens, this says what does reach a person.

How to reach a person