Was this tool helpful?
How to use the Password Generator
- 1Choose the password length (16+ characters recommended).
- 2Select which character types to include.
- 3Copy the password and save it in a password manager.
What makes a password strong?
Length matters most. A random 16-character password using upper and lower case letters, numbers and symbols has over 100 bits of entropy and would take longer than the age of the universe to brute-force. Never reuse passwords across sites; use a password manager to remember them.
How strong is a random password?
Strength is measured in bits of entropy: length × log₂(number of possible characters). Each extra character multiplies the guesses needed by about 94 when you use letters, numbers and symbols.
| Random password | Entropy (bits) | Verdict |
|---|---|---|
| 8 lowercase letters | 38 | Weak: crackable offline |
| 8 mixed characters | 52 | Fair |
| 12 mixed characters | 79 | Strong |
| 16 mixed characters | 105 | Strong |
| 20 mixed characters | 131 | Strong |
Current best practice
- Length beats complexity: the US NIST guidelines (SP 800-63B, 2025 revision) recommend at least 15 characters for passwords used on their own.
- Use a different password for every account, so one leak doesn't unlock the rest.
- Store them in a password manager rather than a note or spreadsheet.
- Turn on two-factor authentication or passkeys for email, banking and social accounts.
- Change a password when there is a breach, not on a fixed schedule.
Frequently asked questions
Is it safe to generate passwords online?
Here, yes. Passwords are created with your browser's cryptographically secure random generator (crypto.getRandomValues) and are never transmitted or stored.
How long should my password be?
At least 12 characters, and 16 or more for important accounts like email and banking.
Are passphrases better than random passwords?
A passphrase of 5–6 random words (like "maple-orbit-tunnel-quiet-lemon") is about as strong as a 12–14 character random password and much easier to type and remember, as long as the words are truly chosen at random.