Most players have accounts on several platforms at once, such as Steam, PlayStation Network, Xbox, Nintendo, Battle.net and EA. Many of them store a payment card and a library worth hundreds of dollars, and all of them are targets for credential stuffing: attackers take email and password pairs from one breached service and try them automatically on every other platform. If you use the same password twice, one leak can empty several accounts.

The fix is one unique password per platform, generated randomly and kept in a password manager. If you type passwords on a console with a controller, pick a passphrase of four or five random words for that platform instead; it is quicker to enter and still strong. Keep the email account linked to your gaming profiles especially well protected, because whoever controls it can reset all of them.

Every major platform offers extra protection: Steam Guard on Steam, 2-step verification on PlayStation, Nintendo and Battle.net, and a Microsoft account for Xbox. Turn them on, and be suspicious of trade offers, "vote for my team" links and messages from friends asking you to log in somewhere, since those are the usual ways accounts are phished.

Try the generator

18

Your settings are remembered on this device only. Privacy Policy.

Example password patterns

1

Two random words joined with a hyphen, plus a 2-digit number and a symbol — e.g. Word-Word##!

2

A short phrase you'll remember (4 words), separators between each word, no spaces — e.g. Word_Word_Word_Word

3

Acronym from a movie quote or song line + the year you first heard it + a symbol — e.g. FirstLettersYYYY!

4

Three uncommon words concatenated, with a digit and a symbol — e.g. WordWordWord#9

5

Mix of casing and one substitution per word (don't overdo it — substitutions don't add much entropy) — e.g. wOrd-wOrd-99!

6

Let our generator pick the whole string — the most secure option. Click Generate above.

Frequently Asked Questions

Why do gaming accounts get hacked even with a strong password?
Usually because the same password was used elsewhere and leaked, or because the owner typed it into a phishing page. A strong password protects you against guessing, but not against reuse or phishing. Use a different password for every platform and turn on the platform's two-factor protection, such as Steam Guard, so a leaked password is not enough to log in.
Should I share my gaming account password with a friend?
It is better not to. Sharing a password means you depend on your friend's device and habits too, and many account thefts start with a friend or "booster" who was trusted with the login. Most platforms offer family sharing or library sharing features that let others play your games without knowing your password.

Related Tools

Continue your security workflow with these tools