How to use the Strong Password Generator
- Choose Password for maximum strength, Passphrase for something easy to remember, or PIN for a number code.
- Set the length and character types. 16 characters with all types is a strong default.
- Check the strength meter and the estimated time to crack.
- Click Copy and paste the password into the sign-up form or your password manager.
- Need a different one? Click Generate new. Every click creates a completely new random password.
What makes a password strong?
Length matters most. Every extra character multiplies the number of guesses an attacker needs. A random 16-character password using upper and lowercase letters, numbers and symbols has about 103 bits of entropy, which would take longer than the age of the universe to crack by brute force. An 8-character password, even with symbols, can fall in hours.
Randomness matters too. Passwords people invent, like Summer2026!, follow patterns that cracking tools try first. This generator uses your browser's built-in cryptographic random number generator (crypto.getRandomValues), the same kind of randomness used for encryption keys.
Passphrases: strong and easy to remember
A passphrase strings together random words, like Velvet-Canyon-Pickle7-Orbit-Lantern. It's much easier to type and remember than k#9Qm!2xV@pL, and five random words from the 7,776-word EFF list give about 65 bits of entropy. Use six or more words for important accounts such as your email or password manager. The words are chosen at random, which is what makes it strong. Phrases you pick yourself, like song lyrics, are much easier to guess.
Tips for staying safe
- Use a different password for every account, so one data breach can't unlock the rest.
- Store them in a password manager such as Bitwarden, 1Password or the one built into your browser or phone.
- Turn on two-factor authentication for email, banking and social media.
- Never reuse your email password. Whoever controls your email can reset everything else.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are created in your browser with a cryptographically secure random generator. They're never sent over the internet, saved or logged, and they disappear when you close the page.
How long should my password be?
At least 12 characters, and 16 or more for important accounts. For a passphrase, use at least 5 random words, or 6 or more for your email and password manager.
Are passphrases as secure as random passwords?
They can be. Security comes from randomness and length. Five random words have about 65 bits of entropy and six have about 78, comparable to a 10–12 character random password, but far easier to remember and type.
Why avoid look-alike characters?
Characters like capital I, lowercase l and the number 1, or O and 0, are easy to confuse when you read a password aloud or type it from paper. The option removes them and reduces strength only slightly.
What does bits of entropy mean?
It measures how unpredictable a password is. Each extra bit doubles the number of guesses needed. Under 36 bits is weak, 60 or more is strong, and 80 or more is very strong.
Can I generate several passwords at once?
Yes. Use How many to create 5, 10 or 20 at once, then copy them individually or all together.