Using emojis in passwords; hackers hate this one trick:
By Jackie Glade
•
May 08, 2026
•
37 views
As weird as it sounds, passwords that contain emojis or other Unicode symbols have actually extremely high entropy.
According to Wikipedia at the time of writing this, there are a total of 3,953 emojis, and 297,334 assigned characters in Unicode 17.0. So as you can see, this is an absolute nightmare for brute-force cracking. However, most of these are characters from different languages, which provide a ton of entropy too, but we are going to be talking about using specifically emojis in passwords here because that is much funnier.
As seen in the image above, I reset the password of a burner account on Glade Art to include some emojis. (NOTE: this was done in my burner test environment, not on the actual site because why would I doxx the account here, lol). And the result is a nice slurry of spammy-looking characters. The usual password requirements still apply, such as the requirement of symbols, letters, and numbers, hence the not-pure emoji string. I guess that just adds a bit more security.
Would I recommend using emojis in your passwords? No, not really. While probably easy to mentally remember, this would be a big pain to type in when on PC. Even a 15 character long password using only uppercase A-Z letters with nothing else is very hard to crack by brute force (assuming it uses randomized letters, like this: CSYWOAVFKSVGFK, and no deliberate words), and that's not even counting using normal numbers and symbols in the password. So "regular" passwords are plenty sufficient.
So perhaps if you're on mobile where typing in emojis is easy, or you store your passwords in plain text files on your desktop (avoid doing this), then you could use emojis in your passwords. I wouldn't recommend it, but it remains a pretty funny concept.
← Back to Blog