Reusing passwords is still the easiest way for accounts to get hacked, because one leaked site gives criminals the key to the rest. This free password generator creates strong, random passwords in one click. Choose the length and which characters to include, or switch to a memorable passphrase made of random words. It uses crypto.getRandomValues, the cryptographically secure random number generator built into every modern browser, rather than the predictable Math.random. The passwords are created on your device and never sent anywhere. We also show an estimate of each password's strength in bits of entropy, so you can see why 16 random characters beat a clever word with a few numbers on the end.
Generate a strong password
Your password
Strength is an estimate based on entropy (length × possible characters). Store your passwords in a password manager rather than a note or spreadsheet.
How to create a strong password
- Pick random characters for most accounts, at a length of 16 or more.
- Pick a passphrase of 5 or more words for passwords you need to type or remember, like your computer login or password manager.
- Click Generate, copy the password, and save it straight into your password manager.
- Use a different password for every site, and turn on two-factor authentication where you can.
How strong is strong enough?
| Entropy | Rating |
|---|---|
| Under 50 bits | Weak |
| 50 to 79 bits | Fair |
| 80 to 99 bits | Strong |
| 100+ bits | Very strong |
FAQ
Is this password generator safe?
Yes. Passwords are made in your browser using its cryptographically secure random generator. They aren’t sent to a server, saved or logged. You can even disconnect from the internet after the page loads and it still works.
How long should my password be?
For most accounts, at least 16 random characters. Current NIST guidance (SP 800-63B) favours long passwords and passphrases over forced complexity rules.
Are passphrases secure?
Yes, if the words are chosen randomly. Our word list has 391 words, so each word adds about 8.6 bits. A 6-word passphrase gives roughly 52 bits, and 8 words about 69 bits, so for important accounts use 8+ words or random characters.
Should I write my password down?
A password manager is better. If you must write a master password down, keep it somewhere physically secure, not in your phone notes.
Comments
Post a Comment