• 12 character minimum
• Tip: Use a passphrase of three unrelated words (easy to remember, more secure)
• Avoid words connected to your account or to TohTest
• Note: passwords are checked against known breached passwords.

Choose a strong password. Use at least 12 characters. The easiest way to get there is three unrelated words, for example harbour-lentil-copper, which is easier to remember than a short password full of symbols. Avoid anything connected to TohTest or your work, such as the platform name, your clinic name, your username, or your email address. Your password is checked against a public list of passwords exposed in known data breaches; if yours appears there you will be asked to choose another. Your password is never sent to the outside breach-checking service — only a short fingerprint is.

• 12-64 characters
• Does not contain your username, email, clinic, program, or platform name
• Not found in known data breaches