Password Generator

What is a password generator?

A password generator creates a random password for you, so you do not have to invent one. Choose the length and the types of characters, and a new password appears instantly. Because it is random, it has no pattern, no personal details and no dictionary words that an attacker could guess.

People are poor at being random. We pick names, dates and keyboard patterns without noticing, and attackers try those first. A generator removes that weakness, which makes it one of the easiest ways to protect your accounts.

What makes a password strong?

Strength comes from unpredictability and length. Every extra character multiplies the number of guesses an attacker needs. A password of 8 random characters from the 94 printable keyboard characters has about 52 bits of entropy, while 16 random characters have about 105 bits. That is far more than twice as strong: it is about nine quadrillion times harder to guess.

A strong password is also unique. If you reuse one password and a single website leaks it, attackers will try it on your email, shopping and banking accounts.

How long should a password be?

• Everyday accounts: At least 12 to 16 characters.
• Important accounts: 20 or more characters for your email, banking and password manager.
• Wi-Fi and devices: 16 or more characters, because attackers can test guesses offline.
• Sites with a limit: Use the longest length the site allows.

How our password generator works

The generator runs entirely in your browser. It uses the browser's cryptographically secure random number generator, the same source used for security features, instead of the weaker Math.random function. Characters are picked without bias, and at least one character from every type you select is guaranteed, so the result passes most website rules.

Your password is created on your device. It is never sent to a server and is not saved anywhere, so once you leave the page it is gone unless you copy it.

Password options explained

• Length: Longer is stronger. Use the slider to choose between 4 and 64 characters.
• Uppercase and lowercase letters: Using both widens the pool of possible characters.
• Numbers: Digits add 10 more options for every character.
• Symbols: Symbols give the biggest boost per character, but a few sites do not accept them. If a site rejects your password, turn symbols off and make it longer.
• Exclude look-alike characters: Removes l, I, 1, O and 0, which is useful when you must type the password by hand or read it aloud.

Common password mistakes

• Reusing one password: One leak then opens every account that shares it.
• Using personal details: Names, birthdays, phone numbers and pet names are easy to find and guess.
• Simple substitutions: Swapping a for @ or o for 0, as in p@ssw0rd, is a trick attackers already know.
• Keeping it short: Short passwords can be guessed quickly, even with symbols.
• Sharing it by message: Chats and emails can be read, forwarded and stored for years.

How to store your passwords safely

You cannot remember dozens of random passwords, and you should not try. Use a password manager, either the one built into your browser or phone or a dedicated app, and protect it with one long master password. Turn on two-factor authentication for important accounts, so a stolen password alone is not enough.

For the few passwords you must memorize, such as a device login or your password manager, a passphrase of four to six random words is easier to remember and still strong. Never email your passwords to yourself or keep them in a plain text note.

When should you change a password?

Change a password right away if a service reports a data breach, if you reused it on other sites, if you shared it with someone, or if you typed it into a page you now doubt. A strong and unique password does not need to be changed on a fixed schedule.

Why use our free password generator?

• Secure randomness: Built on the browser's cryptographic random generator.
• Full control: Choose the length and the character types you need.
• Strength meter: See an estimate of how hard the password is to guess.
• Private: Nothing is uploaded, stored or logged.
• Free: No signup, no limits and nothing to install.