Password rules · checked 2026-10-07
Gmail Password Requirements
Your Gmail password is your Google Account password. Here are the rules Google publishes in its Account Help, with a live check and a one-click password that meets them.
Type a password above to check it against these rules.
Also required, but not checkable here:
- - Not particularly weak - Google gives "password123" as an example
- - Not a password you have used before on this account
Source: Google Account Help: Create a strong password & a more secure account (checked 2026-10-07)
Checked in your browser. Your password is never sent or stored. Verify it
The Gmail Password Rules
Google Account (Gmail) requires only ascii letters, numbers and symbols (no accents or other characters), does not start or end with a space. It recommends at least 12 characters.
| Requirements | Google Account (Gmail) requires only ascii letters, numbers and symbols (no accents or other characters), does not start or end with a space. |
|---|---|
| Recommendations | It recommends at least 12 characters. |
| Maximum length | Not published |
| Also | Not particularly weak - Google gives "password123" as an example |
| Also | Not a password you have used before on this account |
| Source | Google Account Help: Create a strong password & a more secure account (checked 2026-10-07) |
Services change their rules. If Google Account (Gmail)'s own sign-up or password form says something different, the form is right - and this page is out of date.
What Google Requires and What It Recommends
Google's help page lists what a password cannot be: one that starts or ends with a space, one you have used before on the account, or one that is particularly weak - Google's example is password123. It also limits passwords to ASCII-standard characters, so letters with accents are rejected.
The page does not state a minimum length. It recommends at least 12 characters and advises against personal details, common words such as letmein, sequences like 1234 and keyboard patterns like qwerty. The sign-up form may enforce its own minimum; if it says something different, the form is right.
The weak-password and reuse rules depend on Google's own lists and your account history, so this page cannot check them. A randomly generated password passes both by design.
How to Create a Password Gmail Accepts
The quickest way is to let a generator do it. "Generate a password that meets these rules" opens the password generator with every character type switched on and 16 characters - within Google Account (Gmail)'s limits and at or above NIST's 15-character baseline. The generator guarantees that each enabled character type appears, so the password meets type rules on the first try.
Then save it in a password manager rather than writing it down, use it for Gmail only, and switch on two-factor authentication if Google Account (Gmail) offers it - see what 2FA is.
Gmail Password FAQs
What are the Gmail password requirements?
Google Account (Gmail) requires only ascii letters, numbers and symbols (no accents or other characters), does not start or end with a space. It recommends at least 12 characters. The source is Google Account Help: Create a strong password & a more secure account, checked on 2026-10-07.
Does Gmail require special characters?
Google Account (Gmail) does not publish a symbol requirement.
Is there a maximum password length for Gmail?
Google Account (Gmail) does not publish a maximum. NIST asks services to accept at least 64 characters, so a long passphrase should normally fit.
Is a password that meets the Gmail rules strong enough?
Meeting the rules only means the form accepts it. NIST's current guidance asks for at least 15 characters when the password is the only factor; A generated password of 16 characters is far harder to guess than a word bent to fit the rules.
Is it safe to check my Gmail password on this page?
The check runs in your browser: the password is not sent, saved or put in the address, and the field is cleared when you leave. Even so, you never need to type a real password into any website other than the service itself - checking a new password before you set it is the safer habit.
How often should I change my Gmail password?
Change it when it may have been exposed - after a breach, a phishing attempt or a suspicious sign-in - not on a calendar. NIST says services shall not force periodic changes. A unique password and two-factor authentication matter more.
Is my Gmail password the same as my Google Account password?
Yes. Gmail has no separate password: you sign in with your Google Account, and the same password protects Gmail, Drive, Photos and every other Google service you use.
Can I use accented letters or emoji in a Gmail password?
No. Google allows only ASCII-standard letters, numbers and symbols, and says accents and accented characters are not supported. The check above flags any other character.
Should I turn on 2-Step Verification for Gmail?
Yes - your email can reset the passwords of most of your other accounts, so it deserves the strongest protection you have. See what 2FA is for the options, from passkeys and security keys to authenticator apps.