Create a password that combines uppercase, lowercase, numbers, and symbols

A strong password is your first line of defense against someone accessing your computer without permission. The most effective passwords use at least 12 characters and mix different types of characters together — uppercase letters (A–Z), lowercase letters (a–z), numbers (0–9), and symbols (!@#$%^&*).

Avoid passwords based on personal information like birthdays, names, or addresses. These are the first things someone trying to break in will attempt. Instead, create something unrelated to your life — think of a phrase you'll remember, then use the first letter of each word plus numbers and symbols. For example, "My dog ate three socks!" becomes Mdat3s!

The longer your password, the harder it is to crack. A 16-character password is significantly stronger than a 12-character one. If your computer allows it, aim for 16 characters or more.

Key Takeaways

  • Use at least 12 characters mixing uppercase letters, lowercase letters, numbers, and symbols to create a password that is difficult to guess.
  • Avoid birthdays, names, addresses, or other personal information that someone could discover about you.
  • Write your password down and store it in a locked drawer or safe place separate from your computer, or use a password manager to store it encrypted.
  • Change your password every 60 to 90 days, or when ready if you suspect someone has seen it.
  • Never share your password with anyone, including family members or IT support staff who should never need it.

Set your password on Windows

On Windows 10 or 11, open the Settings app by pressing the Windows key and typing "Settings," then press Enter. Click "Accounts" in the left menu, then select "Sign-in options."

Under the "Password" section, click "Add." Windows will ask you to create a new password and a password hint. Type your password twice to confirm it matches — Windows will not show you what you are typing. The hint should be something only you would understand but not the actual password. Click "Next," then "Finish."

If you already have a password and want to change it, click "Change" instead of "Add." Windows will ask for your current password first, then prompt you to enter the new one twice.

Set your password on Mac

On a Mac, click the Apple menu in the top-left corner and select "System Settings" (or "System Preferences" on older versions). Click "General" in the sidebar, then look for "Users & Groups" or "Accounts" depending on your macOS version.

Click the lock icon at the bottom of the window and enter your current administrator password to unlock the settings. Select your user account from the list on the left. Click "Change Password," then enter your current password once and your new password twice. Click "Change Password" to save it.

If you do not have a password yet, click "Set Password" instead. You can also add a password hint that will appear if you forget your password.

Store your password somewhere safe

Once you have created a password, you need a way to remember it without writing it on a sticky note attached to your monitor. The safest approach is to write it down and store the paper in a locked drawer, safe, or lockbox that is separate from your computer.

A better option is to use a password manager — a program that stores all your passwords in an encrypted vault protected by one master password. Password managers like Bitwarden, 1Password, or Dashlane generate strong passwords for you and fill them in automatically when you need them. You only have to remember one master password.

If you use a password manager, make sure the master password is one you can actually remember. Write it down and store it in a safe place, but do not store it on your computer or in a cloud service.

Update your password regularly

Change your computer password every 60 to 90 days. This limits the window of time if someone has discovered your password without your knowledge. Set a reminder on your calendar so you do not forget.

Change your password when ready if you think someone may have seen it, if you used the same password on a website that was hacked, or if you shared it with someone who no longer needs access to your computer. You should also change it if you have not used your computer in several months and are logging back in.

What to do if you forget your password

On Windows, click "I forgot my password" on the sign-in screen. Windows will ask you security questions you set up when you created your account. Answer them correctly and Windows will let you create a new password.

On a Mac, restart your computer and hold Command + S while it boots up to enter Single User Mode. Type resetpassword and press Enter. The password reset utility will open and walk you through creating a new password for your account.

If you cannot remember the answers to your security questions on Windows, or if you cannot access Single User Mode on a Mac, you will need to contact a computer technician. They can reset your password, but you will lose access to any encrypted files or data that was protected by the old password.

Protect your password while typing

When you type your password, make sure no one is looking over your shoulder. Position your screen so others cannot see it, and cover the keyboard with your hand while you type.

Never type your password on a computer that is not yours, such as a library computer or a friend's laptop. If you must access your account from another device, use a password manager app on your phone instead, which will fill in the password for you without displaying it on screen.

Do not type your password into an email, text message, or any message app. No legitimate support person will ever ask you to send your password. If someone claims to be from your computer manufacturer or your internet provider and asks for your password, hang up or close the message — it is a scam.

Frequently Asked Questions

Is a 12-character password really enough?

Twelve characters is the minimum for a strong password, but 16 or more is better. The longer your password, the longer it takes a computer to guess it. If you can remember a 16-character password, use that instead.

Should I use the same password for everything?

No. If one website is hacked and your password is stolen, someone could use that same password to access your computer, email, and bank account. Use a different password for each important account, and use a password manager to keep track of them.

Can I use a passphrase instead of a random password?

Yes. A passphrase like "BlueSock-Jumped-Over-7-Fences" is often easier to remember than a random string and just as strong if it is long enough and uses mixed characters. Make sure it is not a famous quote or song lyric, which someone could guess.

What if my computer asks me to set a password hint?

A hint should help only you remember your password, not help someone else guess it. "My dog's name" is a bad hint because someone who knows you could figure it out. "The street where I lived in 1995" is better because it is specific to your life but not obvious.

Do I need a password if I live alone?

Yes. Even if no one else has physical access to your computer, a password protects you if your computer is stolen or if someone gains remote access through the internet. A password is your basic protection against unauthorized use.