Password Requirements

password security requirements
Who this article is for
For anyone choosing a password when registering a new account or changing an existing password.

Mandatory requirements

  • At least 10 characters
  • Includes at least 3 of the 4 types: uppercase letters, lowercase letters, numbers, and symbols
  • Does not match a password known to have been leaked from another service (checked automatically)
  • Must not be the same as, or similar to, your email address or display name

Recommended

  • At least 14 characters
  • Includes all 4 character types
  • A random string is preferable to a combination of meaningful words
  • Not reused on other services

Examples to avoid

Bad example Why
password123A textbook, easily guessed choice
tanaka1234Name + sequential numbers
20260101A birthday or anniversary
Something used on another serviceReuse spreads the damage when one is leaked

We recommend using a password manager

Using 1Password, Bitwarden, iCloud Keychain, Google Password Manager, and the like lets you manage strong random passwords safely. ReceiptRoller supports all of these.

Note: Avoid practices such as writing your password on paper stuck near your PC, relying only on your browser's autosave, or saving it in a plain-text file.

Related guides

Published: 2026-04-27 Updated: 2026-07-05