Why use a generated password?
People tend to choose passwords that are easy to guess: names, dates and keyboard patterns. A password made by a random generator has no pattern for an attacker to exploit. Length and randomness together are what make a password hard to crack.
How this generator works
It uses your browser's built-in cryptographic random number generator, the same source used for security features. The password is created on your device. It is not sent to our server, not saved and not logged. When you close the page it is gone, so copy it into a password manager straight away.
Reading the strength meter
Strength is shown as bits of randomness: the length multiplied by the number of possible characters, expressed in bits. As a rough guide, under 40 bits is weak, 60 to 80 is strong and above 80 is very strong. A 16-character password using all four character types is well above 80 bits.
Good password habits
- Use a different password for every account. One leak should not open everything.
- Use a password manager so you do not have to remember them.
- Turn on two-step verification for email, banking and social accounts.
- Prefer length. 16 characters or more is a sensible target for important accounts.
- Never share a password by message or email.
Look-alike characters
Tick the look-alike option if you may need to type the password by hand. It removes characters such as 0, O, 1, l and I that are easy to confuse.
Frequently asked questions
Is it safe to use an online password generator?
This one runs entirely in your browser and makes no network request when you generate a password. For extra caution you can also use your password manager's built-in generator.
Some sites reject symbols. What should I do?
Untick Symbols and increase the length instead.