Generate a strong, random password on your own device. The tool uses your browser’s cryptographically secure random number generator, so the password is never sent anywhere. Choose the length and character types, then copy it straight into your password manager.
Loading the tool…
How to use it
- Set the length. 16 characters or more is a good default; 20+ for important accounts.
- Keep all four character types on unless a site rejects symbols.
- Click New password for another, then copy it.
Look-alike characters such as 0/O and 1/l/I are left out so passwords are easier to read.
How strength is measured
Strength is shown in bits of entropy: length × log₂(number of possible characters). Each extra bit doubles the guesses needed.
| Password | Possible characters | Entropy |
|---|---|---|
| 8 characters, lowercase only | 25 | about 37 bits: weak |
| 12 characters, all types | 80 | about 76 bits: strong |
| 20 characters, all types | 80 | about 126 bits: very strong |
Good password habits
- Use a different password for every account. Reused passwords are the main way one leak becomes many.
- Store them in a password manager rather than a document or browser notes.
- Turn on two-step verification for email, banking and social accounts.
- For a password you must remember, such as your password manager’s, the UK’s National Cyber Security Centre suggests three random words, like coffee-train-fish, made longer with a number or symbol.
Frequently asked questions
Is this password generator safe?
Yes. Passwords are created in your browser using its secure random generator and never leave your device.
How long should a password be?
At least 12 characters, ideally 16 or more. Length adds more strength than complexity.
Should I change my passwords regularly?
Current UK guidance is to change a password when you suspect it’s been compromised, rather than on a fixed schedule.
Sources
Last updated: