Generate Strong Password
5 Strong Passwords — Click any to copy:
Tips for Creating Strong Passwords
- Use at least 12–16 characters for general accounts
- Use 20+ characters for banking, email, and social media
- Always include uppercase, lowercase, numbers, and symbols
- Never use your name, birthday, or common words
- Use a different password for every account
- Store passwords in a trusted password manager (like Bitwarden or 1Password)
- Enable two-factor authentication (2FA) wherever possible
Why Weak Passwords Are Dangerous
Most account break-ins do not happen because someone "hacks" a strong system. They happen because a password was short, predictable, or reused. Attackers run automated tools that try millions of common passwords such as names, birth years, keyboard patterns (like 123456 or qwerty) and simple word-plus-number combinations. If your password is on those lists, it can be guessed in seconds.
How to Use This Generator
Choose the length you want using the slider, select which character types to include (uppercase, lowercase, numbers, symbols), and click Generate. Copy the password and save it in a password manager straight away. If a website does not accept certain symbols, untick the symbols option and increase the length instead — a longer password made of letters and numbers is still very strong.
Password vs Passphrase
A passphrase is a string of several random words, for example four or five unrelated words joined together. Passphrases are easier to remember and can be just as secure as a random character string if they are long enough and the words are truly random. Use a random password for accounts you store in a password manager, and a passphrase for the few passwords you must remember, such as your phone lock or your password manager master password.
Common Password Mistakes to Avoid
- Adding a single number or "!" to the end of a common word
- Reusing your email password on shopping or social media sites
- Sharing passwords over chat, SMS or email
- Saving passwords in plain notes or unprotected spreadsheets
- Never changing a password after a website reports a data breach
When Should You Change a Password?
You do not need to change strong, unique passwords on a fixed schedule. Change a password immediately if the service reports a breach, if you notice suspicious login activity, if you shared it with someone, or if you used it on a device that may be infected. Always turn on two-factor authentication for email, banking and social media accounts, because your email account can be used to reset all your other passwords.
How Secure is a Generated Password?
A randomly generated 16-character password using all character types has over 100 trillion trillion possible combinations, making it practically impossible to crack with brute force. Our generator uses your browser's built-in cryptographic random number generator for true randomness.