How to use this tool
- Set the length with the slider. Sixteen characters or more is a good default.
- Choose which character types to include.
- Copy the password and save it in your password manager.
What makes a password strong
Length matters most. Each extra character multiplies the number of possible combinations, so a random 16-character password is far harder to crack than a clever 8-character one. Mixing upper and lower case letters, numbers and symbols helps too, because it widens the pool of characters each position can hold.
Entropy, measured in bits, gives a rough idea of strength. Around 60 bits resists casual guessing, and 80 bits or more is well beyond what attackers can brute-force today.
Is this generator safe?
Passwords are made with the Web Crypto API built into your browser, the same source of randomness used for encryption. Nothing is sent over the internet or stored, and the page works offline once loaded.
Good habits
Use a different password for every account so one leak can't unlock the rest. A password manager can remember them for you. Turn on two-factor authentication for email and banking, since those accounts can reset everything else.
Need random numbers instead, for a draw or a giveaway? Use the random number generator.
Frequently asked questions
How long should a password be?
At least 12 characters, and 16 or more for important accounts like email and banking.
Are generated passwords stored?
No. They are created in your browser and disappear when you close the page.
What does 'avoid look-alikes' do?
It removes characters that are easy to confuse, like 0 and O or 1 and l, which helps if you need to type the password by hand.
Is a passphrase better than a random password?
A long passphrase of four or more random words is also strong and easier to remember. Both work well if they are long and unique.