Cyber Explorer Skills · lesson 8 of 16 · 15 min
Password phrase practice
A passphrase is a type of password made from a sequence of words instead of a random mix of characters. Passphrases are easier to remember and can be very strong when done right — because length is one of the most important factors in password strength.
For example: PurpleTurtleJumpsHigh! is much easier to remember than xK9#mQ2@ — and it is actually stronger because it is longer. A computer trying to guess passwords has to try far more combinations for a long passphrase than for a short complex password.
Strong passphrase formula: Pick 3–4 random words that are not related to each other. Add a number and a special character. Make it at least 16 characters long. Example: Cloud7Bicycle!River
Passphrase vs. password — which is stronger?
- Weak password
- password123
- Very weak
Common word + simple numbers. Cracked in seconds.
- Medium password
- xK9#mQ2@
- Medium
Complex characters but only 8 characters long. Hard to remember.
- Strong passphrase
- Cloud7Bicycle!River
- Very strong
Long, uses unrelated words, a number, and a special character. Easy to remember.
- Best passphrase
- Purple!Elephant9Jumps#High
- Excellent
25 characters, unrelated words, mixed case, numbers, and special characters.
Creating your own passphrase
Follow these steps to create a strong passphrase:
- Pick 3–4 random words that have nothing to do with each other (not your name, pet, or birthday).
- Add a number somewhere in the middle or end.
- Add a special character (!, @, #, $, etc.).
- Mix uppercase and lowercase letters.
- Make sure it is at least 16 characters long.
Test: Blue!Mountain9Frog — 18 characters, unrelated words, number, special character. Strong!
Key words to remember
- Passphrase
- Password length
- Random words
- Special character
- Brute force attack
Match each passphrase concept to its description
Passphrases — quiz
What is a passphrase?
- A password made of numbers only
- A sequence of words used as a password
- A hint to help you remember your password
- A type of security question
Answer: A sequence of words used as a password
A passphrase uses multiple words strung together, making it long, memorable, and strong.
Which of these is the strongest passphrase?
- ilovecats
- myname2010
- Blue9Elephant!Storm
- abc123
Answer: Blue9Elephant!Storm
Blue9Elephant!Storm uses unrelated words, a number, and a special character — making it long and strong.
A longer passphrase is generally harder to crack than a short complex password.
- True
- False
Answer: True
Length is one of the most important factors in password strength. Longer passphrases are very hard to crack.
What is the minimum recommended length for a strong passphrase?
- 6 characters
- 8 characters
- 12 characters
- 16 characters
Answer: 16 characters
A passphrase should be at least 16 characters long to be considered strong.
Which of these is the best passphrase?
- mydog2015
- password!
- Purple!Elephant9Jumps
- abc123!
Answer: Purple!Elephant9Jumps
Purple!Elephant9Jumps uses unrelated words, a special character, and a number — making it long and strong.
Using your name or birthday in a passphrase makes it stronger.
- True
- False
Answer: False
Personal information like your name or birthday is easy for attackers to guess. Use random, unrelated words.
What is a brute force attack?
- A physical attack on a computer
- A computer trying millions of combinations to guess your password
- A type of phishing email
- A way to reset a forgotten password
Answer: A computer trying millions of combinations to guess your password
Brute force attacks try every possible combination — longer passwords resist this much better.
Why are passphrases easier to remember than complex passwords?
- They are shorter
- They use words, which are easier for humans to remember than random characters
- They do not need special characters
- They are the same for every account
Answer: They use words, which are easier for humans to remember than random characters
Words are naturally easier for humans to remember than random strings of characters.
You should use the same passphrase for every account.
- True
- False
Answer: False
Every account should have a unique password or passphrase — reusing them means one breach exposes all your accounts.
Which step is NOT part of creating a strong passphrase?
- Pick 3–4 random unrelated words
- Add a number and special character
- Use your pet’s name as one of the words
- Make it at least 16 characters long
Answer: Use your pet’s name as one of the words
Personal information like your pet’s name is easy to guess. Use truly random, unrelated words.
Previous lesson: Spot the safe choice
Back to Cyber Explorer Skills
Next lesson: Privacy detective