You must choose or generate a password for your account on that is at least:
- Seven characters long, if it includes a number and a lowercase letter, or
- 15 characters long with any combination of characters
To keep your account secure, we recommend you follow these best practices:
- Use a password manager to generate a password of at least 15 characters.
- Generate a unique password for . If you use your password elsewhere and that service is compromised, then attackers or other malicious actors could use that information to access your account.
- Configure two-factor authentication for your personal account. For more information, see About two-factor authentication.
- Optionally, add a passkey to your account to enable a secure, passwordless login. See About passkeys.
- Never share your password, even with a potential collaborator. Each person should use their own personal account on . For more information on ways to collaborate, see: Inviting collaborators to a personal repository, About collaborative development models, or Collaborating with groups in organizations.
You can only use your password to log on to using your browser. When you authenticate to with other means, such as the command line or API, you should use other credentials. For more information, see About authentication to .