Most password advice repeats the same checklist: use uppercase, lowercase, a number, and a symbol. That checklist isn't wrong, but it's incomplete — and it leads people to create passwords like P@ssw0rd1!, which technically satisfies every rule and is still weak, because the underlying word is common and the substitutions are predictable.
The single biggest factor in password strength is length, not the variety of character types. A long password built from random, unrelated words is dramatically harder to crack than a short one stuffed with symbols. This is because the number of possible combinations grows exponentially with each additional character — adding four more characters to a password can multiply the cracking time by a factor of thousands, even without adding any new character types.
Swapping "a" for "@" or "o" for "0" feels clever, but password-cracking tools have included these substitutions in their guessing patterns for years. A password like P@ssw0rd is checked by automated tools almost as quickly as Password itself, because the substitution pattern is so common it's built into standard cracking dictionaries.
| Password | Why it's weak or strong |
|---|---|
| P@ssw0rd1! | Common word with predictable substitutions — weak despite looking complex |
| Tr0ub4dor&3 | Slightly better, but still a single recognizable word with common swaps |
| correcthorsebatterystaple | Long and random in combination, though all-lowercase reduces some strength |
| Cobra3!Falcon7@ | Mixes unrelated words, casing, numbers, and symbols — high entropy and easy to read aloud |
For accounts you'll type often, a password built from a few unrelated words plus numbers and symbols (like Cobra3!Falcon7@) hits a good balance — it's long enough to be strong but structured enough to read and type. For accounts protected by a password manager that autofills the password, fully random strings are fine since you'll never type them manually.
A good generator should let you control length and character types while avoiding patterns that are easy to predict. SingleReveal's built-in generator creates passwords from real word combinations woven together with numbers and symbols, so the result is both strong and easier to communicate verbally or write down temporarily than a fully random string.
Try the built-in password generator — then share the result as a one-time secret link instead of typing it into chat.