Password Generator

How the generator works

Set the length and which character types to include, then generate. The password is assembled on your device using your browser’s cryptographic random source, so the result never leaves your computer and is never logged. Generate as many as you like.

What makes a password strong

Length matters more than complexity. A longer password has exponentially more possible combinations, which is what defeats automated guessing. A random 16-character password is dramatically harder to crack than a short one padded with a few symbols.

Uniqueness matters just as much. Reusing one password across sites means a single breach unlocks every account that shares it. A different password per account contains the damage to one place.

Storing passwords safely

Strong, unique passwords are impossible to memorize at scale, which is the point of a password manager. It stores them encrypted and fills them in for you, so you only remember one master secret. Wherever a site offers it, add two-factor authentication so a stolen password alone is not enough to get in.

Guides from Password Generator

Longer explainers written for this site. Each one carries a review date.

• Why a long password beats a clever one · 5 min read
  P@ssw0rd! is weaker than horsebatterystaplecorrect. The math behind why length wins, without the math degree.
• The case for finally getting a password manager · 6 min read
  You already know you should. Here’s what actually changes day to day, what the real risks are, and how to start without migrating your whole life this weekend.
• Passphrases: strong passwords you can actually remember · 5 min read
  Four random words beat 8 characters of keyboard confetti — if the words are truly random. How to make one, and the mistakes that ruin them.
• How to find out if your passwords have already leaked · 5 min read
  Billions of passwords are in public breach dumps. Checking whether yours are included takes five minutes and is probably the highest-value security errand there is.
• 2FA: which second factor is actually worth using · 6 min read
  Any 2FA beats none, but the gap between SMS codes and hardware keys is bigger than most people think. Ranked, with an honest take on the hassle.
• What actually happens when someone “cracks” a password · 6 min read
  Cracking isn’t a hacker typing guesses at a login box. It’s math run on a stolen file, and understanding it explains every password rule worth following.

See all guides →