Security Tools

Password Generator

Generate a strong, random password with your own rules.

  • Free to use
  • No sign-up

Working on it…

Running the tool — your results will appear here in a moment.

No results yet

Enter the details above and run the tool to see your results here.

Advertisement

About this tool

Create a strong, random login secret in one click. Choose a length from 6 to 64 characters and which character types to include.

How to use it

  1. Set the length — 16 or more is a good default.
  2. Tick uppercase, lowercase, numbers and symbols as needed.
  3. Optionally exclude look-alike characters, then generate and copy.

The options explained

  • Length – the single biggest factor in strength; every extra character multiplies the possibilities.
  • Character types – mixing upper and lower case, digits and symbols makes guessing far harder.
  • Exclude ambiguous characters – removes I, l, 1, O and 0, which are easy to confuse when typing from paper.

Why random is better

People tend to pick names, dates and keyboard patterns, which attackers try first. A random string has no pattern to guess.

Keep your accounts safe

  • Use a different one for every account, so one leak does not unlock everything.
  • Store them in a reputable password manager instead of a note or spreadsheet.
  • Turn on two-factor authentication wherever it is offered.
  • Check site rules — a few services reject certain symbols.

A worked example

A small team sets up a new shared accounting system. Instead of reusing an old favourite, each person generates a unique 20-character secret, stores it in the team's password manager and turns on two-factor authentication. If another website they use is ever breached, the accounting system stays safe.

Length guide

  • 12–15 characters – minimum for everyday accounts.
  • 16–20 characters – recommended for email, banking and work systems.
  • 24+ characters – Wi-Fi networks, admin accounts and anything stored in a manager.

Passphrases

If you have to type a secret often, a passphrase of four or five random words separated by dashes can be as strong as a shorter random string and easier to remember.

Where to store them

Reputable password managers encrypt your vault and fill logins automatically. Avoid sticky notes, plain text files and spreadsheets.

Site rules

If a website rejects certain symbols, untick Symbols and increase the length to keep strength high.

Related tools

Step by step: securing an important account

  1. Generate a 20-character secret with all character types.
  2. Save it in your password manager before changing it on the website.
  3. Update the account and log out of all other sessions.
  4. Turn on two-factor authentication with an app rather than SMS where possible.
  5. Store the backup codes somewhere safe and offline.

Frequently asked questions

Sixteen characters or more is a strong default for most accounts.
Characters that look alike, such as I, l, 1, O and 0; excluding them makes typing easier.
It is safer not to. Use a unique one for every account and keep them in a password manager.
Untick Symbols and increase the length to keep the result strong.
Yes, four or five random words are strong and easier to type.
So you never lock yourself out if the browser or page closes unexpectedly.