Password Generator Online Free

How to generate a strong password

Choose a length and which character types to include, then generate. Copy the result straight into your password manager, which is where it belongs, because a password worth using is one you cannot remember.

Where the randomness comes from

Passwords are generated with your browser's cryptographic random number generator, the same source used for encryption keys. This matters more than it sounds. Ordinary random functions are predictable if an attacker knows enough about the state of the program, whereas a cryptographic generator is built specifically to make that infeasible.

Nothing is transmitted. The password is created on your device and never sent anywhere, which is the only sane arrangement. A password that has travelled across the internet before you have even used it is not really a secret.

What actually makes a password strong

Length, far more than complexity. Each additional character multiplies the number of possibilities, while swapping an "a" for an "@" adds almost nothing, because every cracking tool has known that substitution for decades. A 16-character random password is beyond brute force with current hardware; a clever eight-character one is not.

The other half is never reusing it. Most account compromises do not involve cracking anything: attackers take credentials leaked from one breached site and try them everywhere else. A unique password per site contains the damage to that one account, and a password manager is what makes that practical.

Frequently asked questions

Is the password sent or stored anywhere?

No. It is generated locally and disappears when you close the tab.

How long should it be?

Sixteen characters or more for anything that matters. Longer still for email, since email resets everything else.

Should I include symbols?

Yes where allowed, but do not sacrifice length to satisfy a fussy rule. Length wins.

What about passphrases?

Several unrelated words are excellent when you must memorise something, such as a device unlock code or the master password for your manager. Everything else should be random and stored.