How to generate a strong, secure password
Most password breaches don't come from someone cracking a strong password, they come from a weak, reused one leaking in an unrelated site's breach, then getting tried everywhere else. A long, random, unique password for each account is still the single biggest thing you control.
Step by step
- Open Password Generator, a password is generated instantly.
- Adjust the length, longer is stronger, aim for at least 16 characters where the site allows it.
- Toggle which character types to include, uppercase, lowercase, numbers, symbols.
- Copy it, or click "Generate" again for a fresh one.
A few practical tips
- Length matters more than complexity tricks. A random 16-character password with all four character types is dramatically harder to guess than an 8-character one, even a "clever" 8-character one with symbols swapped in.
- Random, browser-generated randomness is what makes this secure. This tool
uses
crypto.getRandomValues(), the same cryptographically secure random source used for encryption keys, notMath.random(), which isn't designed to be unpredictable enough for security purposes. - Exclude ambiguous characters (0, O, 1, l, I) if you'll be typing it by hand, from a printed copy or reading it off a screen to another device.
- A generator alone doesn't solve reuse. Pair it with a password manager so you actually get a different strong password per account instead of one strong one reused everywhere.
Ready to generate a password?
Open Password Generator