A password is secure if it has at least 50 bits of entropy and does not appear in any list of leaked passwords. Read more