Back

Password Generator

Create secure passwords

This generator builds a random password from the character sets you choose, at whatever length you set. Nothing is transmitted anywhere: the password is produced in your browser and never leaves it.

Length matters far more than complexity. Each additional character multiplies the number of possible combinations, which is why a long passphrase of ordinary words beats a short string of symbols by an enormous margin.

How to use it

  1. Set the length. Sixteen characters is a sensible floor for accounts that matter.
  2. Choose which character sets to include: lowercase, uppercase, numbers, and symbols.
  3. Generate, then copy the result straight into your password manager.
  4. Generate a fresh password for every account rather than reusing one.

What actually makes a password strong

  • Length beats complexity. A sixteen-character password drawn from lowercase letters alone has more possible combinations than an eight-character one using every symbol on the keyboard.
  • Uniqueness matters more than either. Most accounts are compromised through credential stuffing, where a password leaked from one site is tried on others, so reuse is the single biggest risk.
  • Substitutions like replacing a with @ or o with 0 add almost nothing. Cracking tools have applied those rules by default for decades.
  • Avoid anything derived from personal information. Names, birthdays, and pet names are the first things tried in a targeted attack.
  • Use a password manager. The reason people reuse passwords is that unique ones are impossible to remember, and a manager removes that constraint entirely.

Where two-factor fits

A strong password protects against guessing, but it does nothing if the password itself is leaked in a breach of the service holding it. Two-factor authentication covers that gap, because an attacker with your password still cannot sign in without the second factor.

App-based codes and hardware keys are meaningfully stronger than SMS, which can be intercepted through SIM-swapping. Where a service offers a choice, the authenticator app is worth the small extra setup.

Frequently asked questions

How long should a password be?
At least sixteen characters for anything that matters. Length contributes far more to strength than character variety, because each extra character multiplies the total number of possibilities.
Is this password generator safe to use?
The password is generated in your browser and is never sent over the network or stored. That said, for high-value accounts the safest practice is to let your password manager generate and store it directly.
Do symbols and numbers really help?
They help, but far less than length does. Adding four characters to a password increases its strength more than adding symbols to a short one.
Why should every account have a different password?
Because breaches happen. When one site leaks its passwords, attackers try those combinations everywhere else, and reuse turns one breach into many compromised accounts.