Choosing a strong password

Test a password

This check happens entirely on your device — nothing you type here is sent anywhere or stored.

The passphrase method

Pick four or five random, unrelated words and string them together — something like raincoat-violin-stairwell-mango. It's long, easy for you to recall, and extremely hard for a computer to guess. Avoid real quotes, song lyrics, or famous phrases: anything that already exists in print or online is weaker than it feels.

Never reuse a password

If one site you use is ever breached, attackers will try that same email and password combination everywhere else. A password that's unique to Aethris means a breach elsewhere can't be used to get into your account here, and vice versa.

Let a password manager remember for you

You don't have to memorize a different passphrase for every account. A password manager generates and stores strong, unique passwordsbehind a single master password you control. A few well-known options, for different needs:

• Bitwarden — open source, free tier available
• 1Password — paid, polished cross-device experience
• Proton Pass — free tier, open source, end-to-end encrypted
• KeePass — free, open source, stores the database locally on your device

Most browsers also offer a built-in option. Whichever you choose, make sure the master password itself is something only you know — written down somewhere safe, never shared digitally in plain text.

What to avoid

• Personal details like birthdates, names, or pet names
• Simple substitutions like "P@ssw0rd"
• Storing passwords in an unencrypted note, spreadsheet, or text file
• Sending a password by email or chat, even to yourself
• Reusing the password you use anywhere else