Password generator

A quick way to make passwords you don't have to invent

People are bad at making up random passwords. We reuse pet names, birthdays and the same three favorite words, and attackers know it. This password generator does the inventing for you: choose how many characters you want, decide which character sets to include (UPPERCASE, lowercase, numbers and symbols), and it produces a fresh random string you can copy straight into a sign-up form or your password manager.

What makes a password hard to crack is mostly length and randomness. Every extra character multiplies the number of guesses an attacker needs, and mixing character types widens the pool each character is drawn from. A random 16-character password that uses all four sets is far beyond what brute-force tools can work through, while a short password built from a dictionary word can fall in seconds.

The generator is meant for one-off use: make the password, save it somewhere safe, and close the page. It works for website accounts, Wi-Fi networks, database users, API test accounts and anywhere else you need a secret that nobody could guess.

How to use the password generator

1. Set the number of characters. 16 is a good default for accounts; use 20 or more for things like a password manager master password or an admin account.
2. Tick the character sets you want: uppercase, lowercase, numbers and symbols. Leave all four on unless a site rejects symbols.
3. Click the button to generate the password.
4. Copy the result and paste it into the site's password field, then save it in your password manager or browser's built-in vault.
5. If you don't like the result (for example, a site refuses one of the symbols), simply generate another one.

Common uses

• Creating a unique password for every new account so one leak can't unlock the rest.
• Replacing old, reused passwords after a data breach notification.
• Setting a long Wi-Fi (WPA2/WPA3) passphrase for your home or office router.
• Making credentials for database users, staging environments, FTP or test accounts.
• Generating temporary passwords for a new employee or family member to change on first login.

Tips and things to know

• Never reuse a password. A generated password is only strong if it is used in one place.
• Store passwords in a password manager rather than a note or spreadsheet. Then you only need to remember one strong master password.
• Some websites limit which symbols you can use or cap the length. If a site rejects your password, turn symbols off or lower the length and generate again.
• Turn on two-factor authentication (2FA) where it's offered. A strong password plus 2FA is much safer than either alone.
• Want to check a password you already use? Run it through our password strength checker first.

Frequently asked questions

How long should a strong password be?

For most online accounts, 14 to 16 random characters is plenty. For high-value accounts, such as email, banking or a password manager master password, go for 20 or more. Length matters more than anything else.

Is it safe to generate a password online?

Treat any password like a secret: generate it, copy it into the site or your password manager, and don't share it. Use the password only once, and avoid generating passwords on shared or public computers.

Should I include symbols?

Yes, when the site allows them. Symbols enlarge the pool of possible characters, so each character is harder to guess. If a site rejects certain symbols, a longer password made of letters and numbers is still very strong.

How do I remember a random password?

You don't have to. Save it in a password manager (most browsers and phones include one) and let it fill the password for you. Only your master password needs to be memorable, and a long passphrase works well for that.

What makes a password weak?

Short length, dictionary words, names, dates, keyboard patterns like qwerty or 123456, and reuse across sites. Generated passwords avoid all of these.

How often should I change my passwords?

Current guidance from security bodies such as NIST is to change a password when there's a reason to, such as a breach or suspected compromise, rather than on a fixed schedule. Unique, strong passwords matter more than frequent changes.

Related tools

• Password strength checker: Make sure your passwords are good enough.
• Random number generator: Generate a random number between a given range.
• Base64 encoder: Encode any string input to Base64.
• List randomizer: Easily convert a list of given text into a randomized list.
• Slug generator: Generate a URL slug for any string input.