Length
Every extra character multiplies the number of possible combinations. Use at least 12 characters, and 16 or more for important accounts.
Password generator
Create strong passwords in one click
Generate secure passwords, memorable passphrases and PINs for every account. Everything runs in your browser, so nothing is sent, stored or logged.
- Cryptographically secure
- Works offline
- No sign-up
Strong
Time to crack: —
PINs are short by design. They're only safe where the device or card locks after a few wrong attempts.
Bulk generator
Generate many at once
Create up to 100 passwords using your current settings, then copy them or save them as a text file. The file is made on your device.
The basics
What makes a password strong
Attackers use automated tools that try billions of guesses per second. Three things slow them down.
Complexity
A mix of uppercase and lowercase letters, numbers and symbols makes a password far harder to brute-force.
Uniqueness
Use a different password for every account, so one data breach can't unlock the rest of your accounts.
Security guide
Keep your accounts protected
A strong password is the first step. These habits help keep your accounts safe.
Use a password manager
Store every password securely and fill them in automatically, so you never need to remember or reuse them.
Enable two-factor authentication
Add a second step, such as an authenticator app, so a leaked password alone isn't enough to sign in.
Never share your passwords
Legitimate services will never ask for your password by email, text or phone.
Update after a breach
If a service you use is compromised, change that password right away.
FAQ
Frequently asked questions
Is this password generator safe?
Yes. Passwords are generated locally with the Web Crypto API, a cryptographically secure random number generator built into your browser. Nothing is sent over the network or stored.
What is a passphrase?
A passphrase is a string of random words, like Crimson-Tiger-Velvet-Orbit-42. Because each word is picked at random from a list of 7,772, five words are about as hard to crack as a 10-character random password, but much easier to remember and type. Words come from the EFF Large Wordlist.
How is "time to crack" calculated?
It assumes an attacker with powerful hardware making 10 billion guesses per second, and shows the average time to find your password by trying every possibility. Real-world times depend on how the website stores passwords, so treat it as a guide.
How long should my password be?
We recommend at least 12 characters for everyday accounts and 16 or more for email, banking and other critical services.
Why include numbers and symbols?
Each character type enlarges the pool of possible characters, which makes the password much harder to guess.
How do I remember a random password?
You don't need to. Save it in a reputable password manager, which will fill it in for you when you sign in.