How to Generate a Strong Password (and Why Yours Is Weak)

Most "strong" passwords aren't. Name@123 ticks every box — uppercase, symbol, number — and cracking tools try exactly that pattern first. Here's how to actually be secure.

Generate a real one

The password generator creates truly random passwords using your browser's cryptographic randomness — nothing is transmitted or stored. Refresh until you get one you like.

Length beats complexity

Each added character multiplies cracking time. An 8-character password can fall in hours; a random 16-character one outlasts any attacker. Use 14+ characters minimum, 20+ for email and banking — your email protects every account that resets through it.

The rules that matter

Never reuse passwords (breached lists are traded constantly). Use a password manager so you don't have to remember random strings. Turn on two-factor authentication everywhere. Don't rotate on a schedule — change only when there's a reason.

Passphrases for memory

For passwords you must type from memory, use 4–5 random words: mango-orbit-staple-quartz. Long, typeable and strong. For everything stored in a manager, use the generator's random strings.

Numeric codes

Need a PIN? The PIN generator beats your birth year, which attackers try immediately.