Google password requirements at a glance
Gmail uses your Google Account password. Google currently publishes the following rules and guidance for a standard personal Google Account.
| Question | Current Google guidance |
|---|---|
| Allowed characters | ASCII-standard letters, numbers, and symbols |
| Accented characters | Not supported |
| Leading or trailing blank space | Not allowed |
| Previously used password | Not allowed on the same account |
| Particularly weak password | Rejected |
| Recommended length | At least 12 characters |
| Required uppercase, number, or symbol | Google's public help page does not require one of each |
Important: “At least 12 characters” is Google's recommendation on the cited help page, not a published hard minimum. A work or school administrator may impose additional rules.
Are Gmail and Google password requirements the same?
Yes for a personal account. Gmail is one service connected to a Google Account, and the same Google Account password is used to sign in to Gmail, YouTube, Google Drive, Google Photos, and most other Google services. Changing that password affects the account rather than only the Gmail inbox.
This distinction matters when searching for “Gmail password rules”: Google publishes the relevant rules under Google Account Help, so a separate Gmail composition policy should not be invented.
What characters can a Google password contain?
Google says the password can use any combination of ASCII-standard letters, numbers, and symbols. Accents and accented characters are not supported. For widest compatibility, generate from unaccented English letters, digits, and conventional ASCII punctuation.
Google's public page does not state that every password must contain an uppercase letter, lowercase letter, number, and symbol. Those ingredients can increase the search space of a randomly generated password, but presenting them as four universal Google requirements would be inaccurate.
Can a Google password contain spaces?
Google explicitly says a password cannot start or end with a blank space. Avoid leading and trailing spaces because they can be difficult to notice when copying or typing. If you want a word-based format, separators such as hyphens are easier to see and preserve.
The passphrase generator can join independent words with hyphens, periods, or underscores. Its generated values stay in your browser.
What is the minimum Gmail password length?
Google's current strong-password help page recommends making the password at least 12 characters long. It does not label 12 as the hard technical minimum on that page. This guide therefore treats 12 as a recommendation rather than claiming it is the universal acceptance threshold.
For a new password, choose a longer generated value when possible. The 16-character password generator provides a practical baseline, while the 20-character generator adds more guessing resistance for a value stored in a password manager.
Why might Google reject a password?
Google lists three explicit rejection categories in addition to unsupported characters:
- The password is particularly weak, such as a common or easily guessed pattern.
- The password was previously used on the same account.
- The password starts or ends with a blank space.
If a fresh ASCII password still fails, check whether you are using a managed work or school account. An administrator may control password changes or enforce organization-specific policies.
How to generate a Google-compatible password
- Open the random password generator.
- Select at least 16 characters unless an account-specific message requires something different.
- Keep uppercase letters, lowercase letters, numbers, and safe ASCII symbols enabled for a large random alphabet.
- Generate a new value rather than modifying an old Google password.
- Save it in a trusted password manager and do not reuse it on another account.
A generated candidate can follow the documented format, but only Google's live password form can confirm acceptance. Google may reject compromised or particularly weak values without publishing every internal detection rule.
Do Google Workspace accounts use different rules?
They can. A Google Workspace account belongs to a work, school, or other organization, and its administrator may restrict password changes or apply additional security controls. Follow the policy shown by your organization and contact its administrator when the personal-account instructions do not match your screen.
Passwords, two-step verification, and passkeys
A compatible password is only one part of account security. Google supports two-step verification and passkeys. A passkey can protect against phishing because it is bound to your device and the legitimate service, while two-step verification adds another check when a password is used.
Never paste a Google password into an unrelated checker. This site's password strength checker runs locally, but it is still safer to test a synthetic password with the same structure rather than an active account credential.
Sources and review date
This page was reviewed on September 28, 2026. Google can change its rules, recommendations, or account interface, so the live Google Account form and current official help pages take priority.