What are 'Dictionary Attacks' and 'Brute-force Attacks'?

A dictionary attack tries common words sequentially, while a brute-force attack tries all character combinations. Short, simple passwords can be cracked in seconds or minutes.

Why is reusing passwords (Credential Stuffing) dangerous?

Because attackers use leaked ID and password sets from one service to log into others, causing a chain reaction where one leak compromises all your accounts.

What are the conditions for creating a secure and strong password?

Length is the most important factor (12-16+ characters recommended). Mixing uppercase, lowercase, numbers, and symbols, or using a 'passphrase' of unrelated words is highly effective.

🛡️ SECURITY GUIDE

How to Create Secure Passwords Guide

A "strong password" is essential to prevent hacking and account takeovers.
We explain best practices for creating hard-to-guess passwords and managing them securely.

⚠️ Dangerous Bad Passwords and Attack Methods

Dictionary Attack

An attack that tries English words found in a dictionary or a list of commonly used passwords (password, qwerty, 123456, etc.) in sequence. Combinations of meaningful words can be cracked in seconds depending on the system.

Brute-force Attack

An attack that tries every possible combination of characters. Short passwords of 8 characters or less, or passwords consisting only of numbers or lowercase letters, can be cracked in minutes to hours with current computer processing power.

Credential Stuffing

An attack that attempts unauthorized login to other services using a "set of ID and password" leaked from one service. If you "reuse passwords", a leak in one place can lead to a chain of takeovers across all your services.

Guessing from Personal Information

Attackers collect target information from social media and other sources. Passwords containing the names of yourself, your family, or your pets, dates of birth (like 19900101), car license plates, or phone numbers are the first to be targeted in spear-phishing attacks.

🛡️ Secure Passwords and Management Best Practices

Length is Most Important (12-16+ characters recommended)

Password strength depends most on its "length". Making a password just one character longer increases the time it takes to crack it exponentially, much more than increasing the variety of characters.

Mix Uppercase, Lowercase, Numbers, and Symbols

By randomly mixing four types of characters, the number of patterns in a brute-force attack can be raised to an astronomical number.

Utilizing Passphrases

When humans need to remember it, a "passphrase" combining multiple unrelated words is effective. Example: "Coffee-Banana-Sky-99!" (21 characters long and extremely strong).

Using a Password Manager

In modern times, it is impossible to set and remember separate complex passwords for every service. Rely on built-in browser features like Chrome or dedicated apps (1Password, Bitwarden, etc.) to let machines handle the memorization.

Enable Multi-Factor Authentication (MFA / 2FA)

This is the most important and powerful defense in modern security. Even if your password is leaked, it prevents login without a one-time code from an authenticator app or biometric authentication (fingerprint/face recognition).

Is your password safe?

Test your current password or a new one you've thought of with our strength checker to see how long it would take to crack. (Input is not sent to the server)

Use Password Strength Checker