Make a strong, random password in one click. Choose the length and the characters to include, generate, and copy it straight into your password manager. Passwords are created in your browser and are never sent anywhere.
Passwords are made on your device with a secure random generator — nothing is sent anywhere or stored.
For the memorable-passphrase method, read our guide: How to Create a Strong Password You Can Remember
How to use the Password Generator
- Set the length with the slider. Somewhere between 12 and 16 characters is a good choice for most accounts.
- Tick the character types you want: uppercase letters, lowercase letters, numbers and symbols. Ticking all four gives the strongest result.
- Press Generate and a new password appears in the box at the top.
- Press Copy and paste the password straight into the sign-up form or your password manager.
- Not happy with it? Press Generate again. Every press creates a fresh random password, so keep going until one looks right.
How it works
Each password is built in your browser using its secure random generator. The tool picks characters at random from the sets you ticked until it reaches the length you chose. Nothing follows a pattern, and the same settings will almost never produce the same password twice.
Under the password you will see a strength label. It is a rough estimate based on length and how many character types are mixed in. Mixing letters, numbers and symbols makes each character harder to guess, but length matters most. A 16-character password is far harder to crack than an 8-character one, even if the short one is full of symbols. As a simple guide: 12 characters is a sensible minimum, and 16 or more is better for email and banking.
Worked example
Set the slider to 16 and tick all four boxes: uppercase, lowercase, numbers and symbols. Press Generate and you might get something like rRtL-rgIHX3!7kNN. That is 16 characters with all four character types mixed in, and the tool rates it “Very strong”. A shorter password, say 8 characters using only lowercase letters, would be rated much weaker. The difference is not small. The longer password has many billions of times more possible combinations.
Common mistakes
- Using the same generated password on several sites. If one site leaks it, every account with that password is at risk.
- Shortening the password because a long one looks hard to type. You normally type it once, then your browser or password manager remembers it.
- Ticking only one character type, such as numbers. A numbers-only password is much easier to guess, however long it is.
- Keeping the password in a note you might lose, instead of saving it in a password manager straight away.
Frequently asked questions
Q: Is it safe to generate a password on a website?
Yes, in this case. The password is created on your own device, inside your browser. It is not sent anywhere or stored by us, so the only copy is the one you see on screen.
Q: How long should my password be?
Aim for at least 12 characters, and 16 or more for important accounts like email and banking. Longer beats more complicated every time.
Q: What if a site rejects symbols?
Untick the symbols box and generate again, then make the password a little longer to make up for it. Length still does most of the work.