Password Generator

A good password is the first line of defense for your email, bank, social media and work accounts. This guide explains what makes a password strong, why a random password generator beats a password you make up yourself, and how to use the tool above to create secure passwords you can actually manage.

What makes a password strong?

A strong password has three qualities: it is long, it is unpredictable, and it is unique to a single account. Length and unpredictability make it hard to guess. Uniqueness limits the damage if a website you use is ever breached, because attackers commonly try leaked passwords on other services, a technique known as credential stuffing.

Why use a random password generator?

People are not good at being random. We lean on names, dates, keyboard patterns and predictable swaps like “a” for “@”, and attackers build their guessing tools around exactly those habits. A password generator removes the human pattern. When it uses a cryptographically secure source of randomness, such as the one built into modern browsers, each character is chosen without bias and the result has no meaning that can be guessed.

Password length vs. complexity

Every extra character multiplies the number of possible passwords. Security people measure this as entropy, counted in bits: each added bit doubles the number of guesses an attacker would need. Adding length usually increases entropy faster than adding another character type, which is why a long password made of random letters can beat a short one stuffed with symbols. For important accounts, 16 characters or more is a practical target, and the strength meter on this page lets you see the effect of each change.

Current guidance, including the NIST digital identity guidelines, favors long passwords and checking against known-breached passwords over arbitrary complexity rules. Still, many sites ask for a mix of character types, so the generator lets you include or exclude each one.

Passphrases vs. random passwords

A passphrase strings together randomly chosen words, such as four or more unrelated words joined by separators. It is easier to type and remember than a string of random characters, which makes it a good fit for a password manager's master password, a device login or a Wi-Fi key. The words must be picked at random. A favorite quote, a song lyric or a phrase you invented will be far easier to guess. Because each word adds a limited amount of entropy, passphrases generally need more words than you might expect, so check the bits shown in the meter.

How to store and use your passwords safely

• Use a password manager. It stores a unique random password for each account so you only need to remember one strong master password.
• Turn on two-factor authentication. A second step, or a passkey where available, protects the account even if the password leaks.
• Avoid insecure storage. Do not keep passwords in plain text files, notes apps, spreadsheets or emails to yourself.
• Never share them in chat. If you must share access, use a feature built for sharing in your password manager.
• Watch for phishing. A strong password does not help if you type it into a fake login page, so check the address before signing in.

Common password mistakes to avoid

• Reusing the same password on more than one account.
• Building passwords from personal details such as names, birthdays or pet names.
• Making small changes to an old password, such as adding a number at the end.
• Relying on simple substitutions like “P@ssw0rd”, which attackers already expect.
• Choosing a short PIN or password because it is easier to type on a phone.

When should you change a password?

Current guidance generally favors changing a password when there is a reason to, such as a data breach, a suspicious login or sharing it with someone who no longer needs access, rather than on a fixed schedule. If a service tells you your details were exposed, replace that password straight away and replace it anywhere else you used it.

Using this password generator

Choose a type, set the length, adjust the character options and copy the result. Use the advanced options when a website has unusual rules, such as no symbols or a required first letter, and the bulk generator when you need several at once. Because everything runs in your browser, you can create as many passwords as you like without signing up for anything. Save each one in your password manager right away and use it for one account only.