Length beats cleverness

Prefer longer random passwords over memorable patterns. Use the generator, then save into a password manager.

Never reuse

One breach should not unlock every account. Unique passwords per site are non-negotiable.

Local generation

Creating passwords offline (in-browser) reduces the chance they are logged by a third-party site.