Create a strong, random password in one click. Choose the length and character types, then copy it and use it anywhere.
1. Choose a length (16 characters is a good default). 2. Tick the character types you want. 3. Click Generate Password, then Copy.
A password generator creates strong, random passwords that are hard for hackers and computers to guess. Most people use weak passwords, like a name, a birthday or "123456", and they reuse the same password on many websites. If one website is hacked, all their accounts are at risk. This free password generator makes a fresh, random password in one click, with a mix of capital letters, small letters, numbers and symbols, so every account can have its own strong password.
Good passwords matter more than ever. Email, banking, social media and shopping accounts all hold personal information, and a weak password is the easiest way in for a thief. Security experts recommend a different password for every important account, at least 12 to 16 characters long, with a mix of character types. Remembering that many long passwords is impossible, which is why most people use a password manager and a generator like this one to create them.
Set the length to 16 and tick all four boxes: capital letters, small letters, numbers and symbols. Click Generate Password and you get a password like a 16-character mix of all four types, for example three capital letters, several small letters, two or three numbers and two or three symbols, in a random order. A 6-character password made only of small letters has fewer than 300 million combinations and can be cracked quickly, while a 16-character password with all four character types has so many combinations that guessing it would take far longer than a human lifetime.
Password strength comes from length and randomness. Each extra character multiplies the number of possible passwords. A password with only small letters has 26 choices per character, but a password with capital letters, small letters, numbers and symbols has more than 90 choices per character. That is why a 12-character mixed password is far stronger than an 8-character one, and a 16-character mixed password is stronger still. This generator uses your browser's random number system to pick each character, so every password it makes is different.
Use at least 16 characters. Sixteen characters is a good default for important accounts, and longer is even better. Use all four character types. Capital letters, small letters, numbers and symbols together make the password much harder to guess. Never reuse a password. Give every important account its own password, so one leak cannot open all your accounts. Store passwords in a password manager. A manager remembers them for you, so you only need to remember one master password. Turn on two-step verification. Even a strong password is safer with a code from your phone as a second check.
A strong password is only half the job. Even the best password can be stolen if a website is hacked, so use a different password for every important account and turn on two-factor authentication wherever it is offered. A password manager can remember all of them for you, so you only need to remember one master password. Change a password at once if a service tells you there has been a data breach.
Compare two passwords. The first has 8 characters using only small letters: there are 26 to the power of 8 possible passwords, which is about 209 billion. That sounds like a lot, but a fast computer can try billions of guesses per second. The second has 12 characters using small letters, capitals, numbers and symbols: there are 94 to the power of 12 possibilities, which is about 476 billion billion. The 12-character password is not just a little stronger; it is millions of times stronger. Set the length slider to 16 or more in the generator above and see how the strength rating changes.
Using a short password. Eight characters is the minimum, but 12 to 16 is much safer. Using the same password everywhere. If one website is hacked, every account with that password is at risk. Using words from the dictionary. Attackers try dictionary words first, so a real word is a weak password even with a number at the end. Sharing your password. Never send a password by message or email, and never write it on a note stuck to your screen. Forgetting to save it. A random password is useless if you cannot find it later, so save it before you close the page.
Pro Tip: Use a different generated password for every important account, and keep them all in a password manager. Then you only need to remember one master password.
Note: Passwords are generated in your browser with your device's random number generator. They are never sent to our servers or stored anywhere.
Is my password saved? No. It is generated in your browser and never sent or stored anywhere. Nobody else can see it, and we cannot see it either.
How long should a password be? At least 12 to 16 characters, with a mix of capital letters, small letters, numbers and symbols. Longer passwords are always stronger.
Should I use the same password everywhere? No. If one website is hacked and you reuse that password, every other account with the same password is at risk. Use a different password for each important account.
Are random passwords better than words I can remember? Yes. A random mix of characters is far harder to guess than a name, a date or a common word. Use a password manager to remember random passwords for you.
What if a website does not allow symbols? Untick the Symbols box and generate a longer password instead, for example 20 characters with letters and numbers only. Length makes up for the missing symbols.
How often should I change my password? Change it at once if a website tells you there was a data leak, or if you shared it with anyone. Otherwise, a strong, unique password does not need to be changed on a fixed schedule.
Can I use the generated password for my bank account? Yes. Generated passwords work anywhere a password is accepted. Just check the site's rules first: a few older sites do not allow symbols.
What if a website rejects my generated password? Some sites limit the length or the symbols allowed. Generate a shorter password, or untick symbols, and try again.