Minecraft no longer has its own login. Java and Bedrock Edition both sign in with a Microsoft account, the same account that may hold your Outlook email, OneDrive files, Xbox purchases and Game Pass subscription. A weak Minecraft password is therefore a weak password for everything else Microsoft stores for you, and a stolen account can lose purchased skins, Realms and saved worlds at the same time.

Give that Microsoft account a long, unique password of at least 14 characters, or a five-word passphrase, and never reuse it for a Minecraft server, launcher or mod website. Third-party servers and fake launchers sometimes collect login details, so only sign in through the official Minecraft Launcher or the Xbox app.

In your Microsoft account's security settings, turn on two-step verification and consider going passwordless with the Microsoft Authenticator app or a passkey. Save the recovery code Microsoft gives you somewhere offline, because it is the fastest way back in if you ever lose access.

Try the generator

16

Your settings are remembered on this device only. Privacy Policy.

Example password patterns

1

Two random words joined with a hyphen, plus a 2-digit number and a symbol — e.g. Word-Word##!

2

A short phrase you'll remember (4 words), separators between each word, no spaces — e.g. Word_Word_Word_Word

3

Acronym from a movie quote or song line + the year you first heard it + a symbol — e.g. FirstLettersYYYY!

4

Three uncommon words concatenated, with a digit and a symbol — e.g. WordWordWord#9

5

Mix of casing and one substitution per word (don't overdo it — substitutions don't add much entropy) — e.g. wOrd-wOrd-99!

6

Let our generator pick the whole string — the most secure option. Click Generate above.

Frequently Asked Questions

Do I need a separate password for Minecraft?
No. Since the move to Microsoft accounts, Minecraft uses your Microsoft account password. That is why it matters so much: the same password also protects your email, cloud files and Xbox purchases. Make it long and unique, and turn on two-step verification in your Microsoft account settings.
Is it safe to log in to Minecraft servers or mod sites with my account?
Only through the official launcher. Multiplayer servers never need your Microsoft password; the launcher handles authentication for you. Any website, mod installer or "cracked" launcher that asks you to type your Microsoft email and password should be treated as a phishing attempt.

Related Tools

Continue your security workflow with these tools