Password Generator
What Does a Password Generator Do?
A password generator creates a strong, random password for you in one click, so you never have to invent one yourself — and never fall back on the same weak password everywhere. Human-chosen passwords are predictable: birthdays, pet names, favourite teams and simple patterns like "password123" are the first things attackers try, and they are tried by automated software millions of times a day. A generator, by contrast, picks each character at random from a large pool of letters, numbers and symbols, producing a password that no guessing program can sensibly predict. This free online password generator does exactly that, with options for length and character types, plus a live strength rating.
It is useful far beyond a single account. Students securing university portals, freelancers protecting client accounts, small business owners setting up staff logins, and anyone creating a new email, banking or social media account all need a fresh, strong password each time. Security experts agree on the core rule: every account should have its own unique password, and that is only realistic if a generator does the hard work of inventing them.
How to Use the Password Generator
- Choose a length. The default is 16 characters, which is a strong choice for most accounts. Use 12 characters as a minimum for everyday accounts, and 20 or more for email, banking and password-manager master passwords.
- Pick your character types. Uppercase letters, lowercase letters, numbers and symbols are all ticked by default. Untick any type a particular site does not accept, but keep at least two types ticked for real strength.
- Click "Generate password". A brand-new random password appears in the box, together with its strength rating and an entropy estimate. Click again any time for a completely different password.
- Copy and save it. Click "Copy password" and paste it into the site you are registering on, then store it in a password manager. The recent-passwords list below the tool keeps your last five generated passwords on this page only, in case you need to grab one again before leaving.
Worked Example: A 16-Character Password
Leave the defaults as they are — length 16, with all four character types ticked — and click "Generate password". You might get something like "k7#Qm9!zX2@vB4w" (your result will differ, because every generation is random). That password is 16 characters long and mixes all four character types, which gives it a pool of roughly 90 possible characters per position. Its strength meter will read "Very strong", with an entropy of about 104 bits — meaning an attacker would need to try around 2 to the power of 104 combinations, a number so large that no computer on Earth could brute-force it in any realistic time.
Compare that with an 8-character password using only lowercase letters, such as "sunshine". Its pool is just 26 characters per position, giving about 38 bits of entropy — weak enough for modern cracking tools to break quickly. The lesson is simple: length matters more than cleverness, and mixing character types multiplies the difficulty for attackers.
What Makes a Password Strong?
| Factor | Weak | Strong |
|---|---|---|
| Length | Under 10 characters | 16 characters or more |
| Character types | Letters only | Upper, lower, numbers and symbols |
| Uniqueness | Same password everywhere | A different password per account |
| Predictability | Names, dates, dictionary words | Randomly generated characters |
Tips for Staying Secure
- Never reuse passwords. One leaked password should never unlock your email, bank and social accounts at the same time.
- Use a password manager. It remembers hundreds of unique passwords so you only need to remember one strong master password.
- Turn on two-factor authentication. Even a strong password is safer with a second step, such as an authenticator app code.
- Change passwords after a breach. If a service tells you its data was exposed, generate a fresh password for that account immediately.
- Do not share passwords by message or email. If someone genuinely needs access, use the service's own sharing or guest feature instead.
Frequently Asked Questions
Are the generated passwords truly random?
Yes. The tool uses your browser's cryptographic random number generator, the same kind of randomness used by security software, rather than a predictable pattern. Every character is chosen independently, so each password is different and cannot be guessed from a previous one.
Is my password stored or sent anywhere?
No. Generation happens entirely in your browser, and nothing is uploaded, saved on a server or logged. The recent-passwords list exists only on this page in your browser's memory and disappears when you leave or refresh the page.
How long should my password be?
Use at least 12 characters for everyday accounts and 16 or more for important ones like email and banking. Longer is almost always better: each extra character multiplies the number of combinations an attacker must try.
What if a website does not accept symbols?
Simply untick the symbols box before generating, and the password will use only letters and numbers. You can also lower the length to fit a site's maximum, but try to keep it as long as the site allows.
Should I change my passwords regularly?
Forced regular changes are no longer recommended by security experts, because they push people towards weaker, predictable passwords. Instead, use a unique strong password per account and change it immediately if that service reports a breach.