Strong password generator
A strong, random 20-character password, made on this device. Copy it into your password manager; it is never saved or sent.
Generator
Made on this device with your browser's secure random generator. Never saved, never sent, no history.
Options
Site rules PRO
Make a list PRO
Password strength checker
Checked as you type, on this device. It isn't saved and is cleared when you leave.
Has this password leaked?
Tap Check to look it up in Have I Been Pwned's list of hundreds of millions of leaked passwords. Only the first 5 characters of its SHA-1 hash are sent, never the password.
Five rules for strong passwords
- Length beats tricks.Four or more random words, or 16+ random characters. Swapping a for @ adds almost nothing.
- One password per site.Reuse is how one leak opens every account.
- Let a password manager remember them.Your phone or browser has one built in.
- Turn on two-step sign-in.Use a passkey or an authenticator app where you can.
- Skip names, dates and patterns.Birthdays, pets, teams and qwerty are tried first.
Settings
What it does
A strong password is long and truly random. This one is 20 characters drawn from 87 letters, numbers and symbols with your browser's cryptographic random generator, which gives about 128 bits of entropy: far beyond what any attacker can guess.
Length matters more than tricks. Current guidance, such as NIST's in the US, puts length and uniqueness ahead of complexity rules, so a long random password used for one account only is what keeps you safe.
How to use it
- A password is ready at the top. Tap the arrows for a new one.
- Adjust length and character types under Options if a site has rules.
- Tap Copy and paste it into the site and your password manager.
Passwords are made on this device and are never saved, sent or kept in a history. Only your settings are remembered.
Good for
- New accounts and password resets
- Email, banking and other accounts that matter most
- Replacing a password that turned up in a leak
- A master password you will store safely (or use a passphrase)
Questions
How long should a strong password be?
At least 16 random characters, and 20 is better. A 20-character random password has about 128 bits of entropy; adding length helps far more than swapping letters for symbols.
Is it safe to generate a password online?
Here it is made on your device with crypto.getRandomValues, the browser's cryptographic random generator. It is never saved, never sent and there is no history. It works with the network turned off.
More generators and checks
Open the full Password Generator · Guide: How to create a strong password