Password Generator

What makes a password strong

A strong password is hard to guess and hard to crack by trial and error. The two things that matter most are length and randomness. This generator creates passwords from your browser's secure random number generator, and the password is never sent to our servers or stored.

Why length beats complexity

The strength of a random password can be measured in bits of entropy: length × log₂(size of the character set). With letters, digits and symbols (about 94 characters), each extra character adds around 6.6 bits. A 12-character password has roughly 79 bits, while a 16-character one has about 105 bits, which is many billions of times harder to crack. A short password with a symbol swapped in for a letter is far weaker than a longer random one.

Good habits

• Use at least 14–16 characters for important accounts such as email, banking and your phone number's recovery account.
• Use a different password for every account, so one leak cannot unlock the rest.
• Store them in a reputable password manager rather than a notes app or on paper.
• Turn on two-factor authentication wherever it is offered. It protects you even if a password leaks.
• Avoid names, birthdays, keyboard patterns like "qwerty" and obvious substitutions like "p@ssw0rd".

Frequently asked questions

Is it safe to generate passwords online?

Here the password is created inside your own browser and is not transmitted. Even so, for the most sensitive accounts consider using the generator built into a trusted password manager.

Should I change my passwords regularly?

Current guidance suggests changing a password when you have a reason to, such as a data breach or suspicious activity, rather than on a fixed schedule.