Length limits, symbol and number rules, and 2FA details for popular sites. No sign-in. Your hints never leave this device.
170 sites
google.com
Cannot start or end with a blank space.
apple.com
microsoft.com
Must contain at least two of: uppercase, lowercase, numbers, symbols.
amazon.com
netflix.com
spotify.com
Must contain at least 1 letter and at least 1 number or special character.
instagram.com
Recommended mix of numbers, letters, and punctuation.
facebook.com
tiktok.com
Must include letters, numbers, and special characters.
x.com
steampowered.com
discord.com
github.com
Either 15+ characters of anything, or 8+ with a number and a lowercase letter.
paypal.com
Must include at least 1 number or symbol. No spaces.
barclays.co.uk
Online Banking also uses a 5-digit passcode and memorable word.
hsbc.co.uk
Must contain both letters and numbers.
yahoo.com
dropbox.com
Password strength meter rejects very weak or common passwords.
adobe.com
Must include at least one number or symbol.
zoom.us
slack.com
Many workspaces sign in with email codes or SSO instead.
ebay.com
Must include a letter plus a number or symbol. Cannot contain your username.
etsy.com
airbnb.com
Must contain a number or symbol and cannot contain your name or email.
disneyplus.com
Must use at least two of: letters, numbers, special characters.
twitch.tv
linkedin.com
reddit.com
snapchat.com
pinterest.com
epicgames.com
Must contain a letter, a number, and a special character.
playstation.com
Must contain both letters and numbers.
nintendo.com
Must use at least two of: letters, numbers, symbols.
ea.com
roblox.com
Cannot contain your username.
coinbase.com
revolut.com
Uses a numeric passcode rather than a traditional password.
lloydsbank.com
Also asks for characters from your memorable information. No spaces.
natwest.com
Online Banking also uses a 4-digit PIN with random digits requested.
santander.co.uk
Uses a password plus a security number. Must mix letters and numbers.
halifax.co.uk
Also asks for characters from your memorable information.
nationwide.co.uk
App login uses a 5-digit passnumber.
monzo.com
No traditional password — sign in via email link and PIN.
starlingbank.com
Uses a numeric PIN rather than a password.
chase.com
Must contain at least one letter and one number. Cannot match your username.
bankofamerica.com
Must include a letter and a number. No spaces.
wellsfargo.com
Must include at least 2 of: letters, numbers, symbols.
stripe.com
Rejects common and previously breached passwords.
wise.com
Must contain at least one letter and one number.
venmo.com
Must include a number or symbol. App can be locked with a PIN.
binance.com
robinhood.com
outlook.com
Uses your Microsoft account. Needs at least two character types.
proton.me
Password cannot be reset without losing access to old encrypted mail unless recovery is set up.
icloud.com
Uses your Apple Account password.
aol.com
notion.so
Can also sign in with email codes, Google, or Apple.
trello.com
canva.com
Most users sign in with email codes or social login.
figma.com
evernote.com
openai.com
samsung.com
Must contain letters, numbers, and ideally a symbol.
wordpress.com
gitlab.com
Rejects weak and commonly used passwords.
whatsapp.com
No password — uses your phone number plus an optional PIN.
telegram.org
Uses phone number sign-in. The cloud password is optional.
threads.net
Signs in with your Instagram account.
tumblr.com
bsky.app
youtube.com
Signs in with your Google account.
primevideo.com
Signs in with your Amazon account.
hulu.com
max.com
Must include at least one number or symbol.
tv.apple.com
Signs in with your Apple Account.
crunchyroll.com
soundcloud.com
xbox.com
Uses your Microsoft account. Needs at least two character types.
battle.net
Must contain at least one letter and one number.
riotgames.com
Must include at least one letter and one number or symbol.
ubisoft.com
minecraft.net
Signs in with your Microsoft account.
walmart.com
target.com
Must use at least two of: letters, numbers, symbols.
shein.com
asos.com
argos.co.uk
tesco.com
Must contain letters and numbers.
aliexpress.com
uber.com
Most sign-ins use phone or email codes.
deliveroo.co.uk
just-eat.co.uk
doordash.com
booking.com
expedia.com
ryanair.com
easyjet.com
britishairways.com
thetrainline.com
vodafone.co.uk
ee.co.uk
o2.co.uk
sky.com
verizon.com
Must contain at least one letter and one number.
onefootball.com
premierleague.com
Used for Fantasy Premier League (FPL) accounts too.
bbc.co.uk
Needs at least one letter and one number or symbol. Covers BBC Sport and iPlayer.
fotmob.com
espn.com
Disney account login, shared with Disney+ and Hulu.
skysports.com
Uses your Sky ID.
dazn.com
uefa.com
Used for Champions League fantasy and ticketing.
livescore.com
nba.com
vinted.co.uk
Must include at least one letter and one number.
depop.com
poshmark.com
grailed.com
stockx.com
mercari.com
gumtree.com
vestiairecollective.com
lego.com
LEGO Account is shared across LEGO.com, Insiders and LEGO apps.
jellycat.com
funko.com
pokemoncenter.com
smythstoys.com
hamleys.com
squishmallows.com
games-workshop.com
buildabear.com
chess.com
lichess.org
rockstargames.com
ea.com/ea-sports-fc/ultimate-team/web-app
fortnite.com
itch.io
gog.com
duolingo.com
bbc.co.uk/news
theguardian.com
nytimes.com
thetimes.co.uk
ft.com
telegraph.co.uk
washingtonpost.com
cnn.com
economist.com
strava.com
connect.garmin.com
fitbit.com
myfitnesspal.com
nike.com/nrc-app
onepeloton.com
parkrun.org.uk
puregym.com
pullandbear.com
zara.com
bershka.com
hm.com
nike.com
adidas.co.uk
jdsports.co.uk
urbanoutfitters.com
primark.com
next.co.uk
uniqlo.com
mango.com
boohoo.com
endclothing.com