About password generator
A strong password is long and unpredictable. The generator uses your browser's cryptographically secure random source, so the result cannot be guessed from a pattern.
What makes a password strong
- Length matters most. 14 or more characters is a good minimum for important accounts.
- Use a mix of letters, numbers and symbols, but do not rely on tricks like replacing 'a' with '@'.
- Use a different password for every account, so one leak does not expose the rest.
Remembering them
Use a password manager to store generated passwords, and turn on two-step verification for email, banking and social accounts.
A worked example
A 16-character password drawn from 94 printable characters has about 105 bits of entropy, which would take far longer than a lifetime to guess by brute force. A 10-character password with only lowercase letters has only about 47 bits and falls much faster.
Good habits
- Generate a different password for each account and keep them in a password manager.
- Turn on two-step verification wherever it is offered.
- Change a password at once if a site you use reports a breach.
