🔐 Secure Password Generator
Generate strong, random passwords in your browser. Nothing is sent to a server or stored.
About this generator
Strong, unique passwords are the single most effective thing most people can do to protect their online accounts. This password generator creates random passwords right in your browser, using the cryptographically secure random number generator built into modern browsers. The passwords are never sent to a server, never stored and never logged, so only you ever see them.
Choose a length from 8 to 64 characters and select which types of characters to include: lowercase, uppercase, digits and symbols. The generator guarantees at least one character from each selected type and avoids easily confused characters such as the letter l and the digit 1, which makes passwords easier to read if you ever need to type one by hand.
Length matters more than complexity. A random password of 16 characters or more is very hard to guess, and longer is better for important accounts. Use a different password for every account so that one breach doesn't expose the others, and store them in a reputable password manager rather than trying to memorise them. Turn on two-factor authentication wherever it's offered.
How to create a strong password
- Make it long: Length matters most. Aim for at least 16 characters for important accounts such as email, banking and your password manager. Each extra character makes a password dramatically harder to guess.
- Make it random: Humans are bad at randomness. Names, dates, keyboard patterns and words with a few swapped letters are the first things attackers try. A generated password has no pattern to guess.
- Use a different one for every account: If one site is breached, a reused password lets attackers into your other accounts. This is the most common way accounts get taken over.
- Store them in a password manager: You can't remember dozens of random passwords, and you shouldn't try. A reputable password manager creates, stores and fills them for you, so you only remember one strong master password.
- Turn on two-factor authentication: A second step, such as an authenticator app or a security key, protects your account even if the password leaks.
What makes a password weak
- Common words and phrases: Passwords like 'password', 'letmein' or 'qwerty' appear in every attacker's list.
- Personal information: Pet names, birthdays, favourite teams and street names can be found on social media.
- Simple substitutions: Changing 'a' to '@' or 'o' to '0' doesn't fool modern guessing tools.
- Short length: Eight characters can be cracked quickly. Longer is stronger than clever.
- Reuse: Even a strong password becomes weak if you use it on several sites.
Choosing a length and character types
- 8 to 11 characters: Only for low-value accounts where the site limits length. Use all four character types.
- 12 to 15 characters: A reasonable minimum for everyday accounts.
- 16 to 24 characters: Recommended for email, banking, cloud storage and anything that can reset other accounts.
- 25 or more: Good for your password manager's master password and other critical accounts. Some sites cap the length, so check.
FAQ
Are the passwords stored or sent anywhere?
No. Passwords are generated locally in your browser and are never transmitted or stored.
How long should my password be?
At least 16 characters for most accounts, and longer for important ones such as email and banking.
Why are some characters missing?
Easily confused characters, such as l, 1, O and 0, are left out so passwords are easier to read and type.
Should I use the same password on multiple sites?
No. Use a unique password for every account, and store them in a password manager.
More generators
Dog Names
Generate cute, funny and classic dog names instantly. Click for a fresh batch of ideas for your new puppy.
Food Picker
Can't decide what to eat? Let the random food picker choose your next meal in one click.
Writing Prompts
Get a random story idea in one click. Endless writing prompts with characters, settings and twists.