Password Strength Guide
| Length | Character Types | Strength |
|---|---|---|
| 8 characters | Letters only | Weak |
| 8 characters | Mixed + numbers + symbols | Fair |
| 12 characters | Mixed + numbers + symbols | Strong |
| 16+ characters | All types | Very Strong |
| 20+ characters | All types | Excellent |
Password Generator
Generate strong, random passwords with custom options. Choose length, character types (uppercase, numbers, symbols), and how many passwords to generate. Passwords are created entirely in your browser — never transmitted or stored.
Password Generator
Frequently Asked Questions
Is this password generator secure?
Passwords are generated entirely in your browser using JavaScript's crypto.getRandomValues() API where available, which provides cryptographically secure randomness. No passwords are ever sent to any server or stored anywhere.
How long should my password be?
Security experts recommend at least 12–16 characters for most accounts. For important accounts (banking, email), use 16–20+ characters with all character types. Use a password manager to remember long, unique passwords for each site.
Length matters more than complexity
Every character you add multiplies the number of possible combinations. Adding symbols to a short password helps far less than simply making it longer.
A 16-character password drawn from lowercase letters alone has vastly more combinations than an 8-character password using the full keyboard. Length is the dominant variable.
Why the old advice backfired
Rules demanding one capital, one number and one symbol produced predictable human behaviour: Password1!, Summer2024!, a capital at the front and a digit at the end. Attackers know those patterns and test them first.
Current guidance from major standards bodies has moved toward favouring length, discouraging forced periodic resets, and screening against lists of known-breached passwords instead.
Passphrases
Four or five unrelated words produce something long, memorable and genuinely strong — provided the words are chosen randomly rather than by you. Human-chosen words cluster around common vocabulary and personal associations, which shrinks the real search space dramatically.
What actually protects you
- Never reuse passwords. This is the single biggest factor. Breaches get combined into credential-stuffing lists, so one leaked site password becomes a key tried against every other account sharing your email.
- Use a password manager. It removes the need to remember or reuse anything.
- Turn on two-factor authentication. It protects the account even if the password leaks.
- Prioritise your email account. Whoever controls it can reset everything else.
Passwords here are generated in your browser and never transmitted anywhere.