How to create a strong password
- Choose a length. 16 characters or more is a good default; use 20+ for important accounts such as email and banking.
- Keep uppercase, lowercase, numbers and symbols turned on. If a website rejects some symbols, turn symbols off and make the password longer instead.
- Click Copy and paste it into the sign-up form and your password manager. Click ↻ for a new one.
Is this password generator safe?
Yes. Passwords are created on your device using your browser’s cryptographically secure random number generator (crypto.getRandomValues). They are never sent over the internet, never stored, and this page cannot see them after you leave. Each character type you choose is guaranteed to appear at least once.
What does “bits of entropy” mean?
Entropy measures how hard a password is to guess. Each extra bit doubles the number of guesses an attacker needs. A random 16-character password using all character types has about 100 bits, which would take longer than the age of the universe to crack by brute force. Length adds more strength than complexity: adding four characters helps more than adding symbols.
Password tips
- Use a different password for every account, so one leak doesn’t unlock everything.
- Store passwords in a password manager instead of a note or spreadsheet.
- Turn on two-factor authentication (2FA) wherever it is offered.
- Turn on Avoid look-alike characters if you will need to read the password aloud or type it by hand.