Password Generator

What is a strong password?

A strong password is one that is practically impossible for an attacker to guess or crack through brute force. Strength comes from two properties: length and randomness. Length matters because every additional character multiplies the number of possible combinations an attacker must try, and randomness matters because predictable patterns — names, dates, dictionary words, keyboard walks — can be guessed by automated tools in seconds. A strong password looks like a meaningless string of mixed characters, which is exactly what a generator produces.

As a rule of thumb, a password of 12–16 random characters drawn from uppercase letters, lowercase letters, digits and symbols is considered strong against offline cracking for the foreseeable future. Shorter passwords, or passwords built from real words, fall to modern graphics hardware in hours or minutes. The gap between a weak and a strong password is enormous: an 8-character lowercase password has about 200 billion combinations, while a 16-character mixed password has over 10^28 — a difference of more than a quintillion times.

Password security

Password security is the practice of protecting accounts by using credentials that resist attack. The most common attack is the dictionary attack, where a program tries thousands or millions of likely passwords drawn from leaked databases, common words and predictable mutations. A close cousin is the brute-force attack, which tries every possible combination. Both are made dramatically harder by long, random passwords.

Equally important is password reuse. If you use the same password across multiple sites, a single breach exposes every account that shares it. The recommended defence is a unique, randomly generated password for each account, stored in a reputable password manager. The manager remembers the passwords so you do not have to, and each password is strong enough to survive on its own. This tool generates the passwords; the manager keeps them safe.

When to use a password generator

There are many practical situations where a password generator is the right choice. The most common ones include:

• Creating new accounts. Generate a fresh, unique password every time you sign up for a new service so no two accounts share a credential.
• Rotating compromised passwords. After a breach notification, replace the exposed password with a strong generated one immediately.
• Securing email and banking. Your most sensitive accounts deserve the longest, most random passwords you can tolerate.
• Wi-Fi and device passcodes. Use a generated string for router admin panels and shared network keys.
• API keys and shared secrets. Generate high-entropy tokens for application-to-application authentication.

Wherever an account or system needs a credential that resists guessing, a password generator is the fastest way to produce one.

Password tips

A few habits will keep your generated passwords effective. First, always use a different password for each account — a generator makes this painless. Second, store them in a password manager rather than a sticky note or a browser's unprotected autofill, and protect the manager itself with a strong master password and two-factor authentication. Third, prefer longer passwords over shorter ones: a 20-character password with only letters is often stronger than a 10-character password with every symbol, and it is easier to type.

Avoid "security theatre" such as forcing a password change every 30 days — research shows this leads to weaker, more predictable passwords as users cycle through minor variations. Instead, change passwords only when there is reason to suspect compromise. Finally, enable two-factor authentication wherever it is offered, so that a stolen password alone is not enough to break in. Strong passwords and second factors together make accounts extremely hard to attack.

How to generate a password

Generating a password with this tool takes only a second and happens entirely inside your browser. No upload, no sign-up, and no installation are required. Follow these three steps:

1. Set the length and character sets. Drag the length slider to choose between 8 and 64 characters, and tick the checkboxes for uppercase, lowercase, numbers and symbols.
2. Generate. Click "Generate" to produce a random password from the selected character pool. Click "Regenerate" for a fresh one.
3. Copy. Click "Copy" to copy the password to your clipboard, then paste it into your password manager or the sign-up form.

Because every password is generated locally with JavaScript on your own device, using the browser's cryptographic random source, your password never leaves your browser. This makes the tool completely private and safe to use for even your most sensitive accounts.