Security Tool
Strong Password Generator
Get a strong, random password in one click: 16 characters by default, up to 64, with the letters, numbers and symbols you choose. It is made in your browser and never sent anywhere.
—
Security
Best Practices
16+ characters
Every extra character exponentially increases cracking time.
True randomness
Avoid patterns, words, or personal info. Use cryptographic randomness.
Mix character types
Lowercase, uppercase, numbers, and symbols for maximum entropy.
Never reuse passwords
Unique password per account. Use a password manager to keep track.
Questions
Random Password Generator, Explained
Is this password generator safe to use?
Yes. The password is made in your browser with its built-in cryptographic random number source (the Web Crypto API) and is never sent to us or stored. Close the tab and it is gone, so copy it into the account or password manager you are setting up first.
How long should a generated password be?
The generator starts at 16 characters, which is a good length for most accounts. Use 20 or more for your email and bank, since those can reset everything else. The slider goes from 8 to 64 characters, so a 12, 18 or 25 character password is one move away.
What makes a random password strong?
Every character is picked at random from the set you allow, so there is no word, name or pattern for an attacker to guess. With all four character types on, each character can be one of 88, and the bits shown under the password count how many guesses trying every combination would take.
Should I turn symbols off?
Only when a site refuses them. Without symbols each character has 62 possibilities instead of 88, so add two or three characters to the length to keep the same strength.
How do I remember a random password?
You should not have to. Keep generated passwords in a password manager or your phone's or browser's built-in password storage, and remember just one long passphrase to unlock it.
Already have a password? Test it with the password strength checker.
Encrypt Everything
Strong passwords protect accounts. A VPN encrypts your entire connection.