Password Generator

How to choose a strong password

Length matters more than anything else. A 16-character password drawn from all character types is dramatically harder to crack than a short one with a clever substitution. If a site allows it, aim for at least 16 characters — or use a passphrase of four or more random words, which is both strong and easier to type.

The strength meter above estimates entropy — the number of truly random bits behind the password. More bits means exponentially more guesses required. Anything above roughly 80 bits is considered very strong for everyday accounts.

Frequently asked questions

How long should my password be?

As long as the site allows — length is the single biggest factor in strength. Aim for at least 16 characters for important accounts, or a passphrase of four or more random words. Each extra character multiplies the number of combinations an attacker must try.

Is it safe to generate a password here?

Yes. Passwords are created entirely in your browser using its cryptographic random generator, and nothing is sent over the internet, logged, or stored. You can even disconnect from the network and it still works.

What is a passphrase, and when should I use one?

A passphrase strings several random words together, like maple-rocket-hollow-cobalt. It is easier to type and remember than a jumble of symbols while still being very strong, which makes it a great choice for the master password you must recall by heart.

Should I include symbols?

They help, but length matters more. A long password with only letters and numbers can be stronger than a short one packed with symbols. Some sites also restrict which symbols they accept, so the avoid-ambiguous and symbol toggles let you match their rules.

Do I still need a password manager?

Ideally yes. The strongest approach is a long, unique password for every account, stored in a password manager so you only have to remember one master passphrase.