How to Generate a Strong Password — Stop Memorizing, Start Generating
How to create passwords that resist guessing, and why it works. Generated with cryptographic randomness, never stored or transmitted anywhere.
Passwords like "birthday plus initials" are as easy to crack as they are to invent. The classic cause of account breaches is reusing one password everywhere — the fix is a different random password per site, with a password manager (your browser's built-in one is fine) doing the remembering.
How — three steps
- 1Open the password generator and set a length (12+ recommended).
- 2Pick the character types to include (upper, lower, digits, symbols).
- 3Copy the result, use it, and save it in your password manager.
TipConfusable characters — l, I, O, 0, 1 — are left out automatically, so writing one down or reading it aloud goes wrong less often.
Not all "random" is equal
This generator uses the browser's cryptographic randomness (crypto.getRandomValues) — designed to be far harder to predict than ordinary random numbers — and verifies that every character type you selected actually appears.
Generated passwords are not stored
Generation happens entirely in your browser; the password is never sent or saved anywhere. Once you leave the page it's gone — so store it in your password manager before you move on.
Habits that pair well
- •A different password per site — one breach stays one breach.
- •Turn on two-factor authentication for critical accounts (email, banking).
- •What matters more than scheduled changes: changing immediately after a leak.
Generate a 12+ character random password now.
Open the Password Generator →