How to create strong passwords (and remember them)
What makes a password strong, how long it should be and how to manage passwords without reusing them.
Strong random passwords generated on your device.
Runs in your browser
Your password
This generator creates random passwords from 8 to 128 characters using crypto.getRandomValues, your browser's cryptographic randomness source. Every character type you select appears at least once.
The password never leaves your device: it is not sent to any server, not stored and not included in analytics.
20 characters with all four types exceed 120 bits of entropy: practically impossible to guess.
16 characters with only lowercase and numbers, excluding look-alikes: easier to type on a TV or games console.
Here it is, because everything happens in your browser with the standard crypto API and nothing is transmitted. You can check by going offline: it keeps working.
At least 12 characters for regular accounts and 16 or more for email, banking and your password manager.
You don't need to: use a password manager and memorise only the master password.
What makes a password strong, how long it should be and how to manage passwords without reusing them.