Password Generator
Generate stronger passwords fast with adjustable length, symbols, numbers, and uppercase controls when you need a secure login or throwaway credential.
Five options, each with a copy button.
Password Generator
Password Generator creates strong random passwords with configurable length and character sets, generating several at a time so you can pick one.
How to use it
- Set the length. The default is 20.
- Choose which character sets to include: uppercase, lowercase, numbers, symbols.
- Generate and copy the one you want.
Why length beats complexity
Password strength is measured in entropy, which is the number of characters in your alphabet raised to the power of the length, expressed in bits. Adding character types widens the alphabet a little; adding length multiplies the possibilities.
With all four character sets the alphabet is around 94 characters, giving roughly 6.5 bits per character. A 20-character password is therefore about 130 bits, which is far beyond any brute force attack. Dropping to 8 characters gives about 52 bits, which is not.
Worked example
How length dominates:
- 8 characters, all setsabout 52 bits
- 12 characters, all setsabout 79 bits
- 20 characters, all setsabout 130 bits
Result: Each extra character adds more strength than adding another character type does.
When it helps
- Creating a unique password for a new account.
- Replacing a password that has appeared in a breach.
- Generating a random API key or secret.
- Producing a password that meets a site's character requirements.
Common mistakes
- Reusing a generated password across sites. Uniqueness is the entire point, and a password manager is what makes it practical.
- Choosing a short password because a site allows it. The site's minimum is not a recommendation.
- Typing a strong random password by hand repeatedly, which is what drives people back to weak memorable ones.
What this tool handles
- Passwords are generated in your browser and never transmitted.
