Password Generator

Creating strong passwords you can actually use

Weak and reused passwords are behind a large share of hacked accounts. When one website suffers a breach, attackers try the same email and password on banking, email and shopping sites. The best defence is a different, strong password for every account, and that is only practical with a generator and a password manager working together.

This generator uses your browser's secure random number source, the same one used to create encryption keys, so the results are unpredictable. Choose the length and the character types a site allows. Length matters more than complexity: a random password of 16 or more characters is far stronger than a short one full of symbols. The strength estimate shows the entropy in bits, and around 80 bits or more is a good target for important accounts.

Passphrases are a good alternative when you need to type or remember a password, such as the master password for your password manager or the login for your computer. Several random words joined together are easier to remember and type on a phone, yet still very hard to guess when the words are chosen randomly. Avoid personal details such as names, birthdays or phone numbers, since attackers try those first. Store generated passwords in a trusted password manager rather than a note on your phone, and turn on two-factor authentication wherever it is offered. Passwords created here are never sent anywhere or stored, and they disappear when you close the page. You can also tell the generator to avoid look-alike characters such as 0, O, l and 1, which helps when a password has to be read aloud or typed from paper.