Password generator

What makes a password strong?

Length matters most. Every extra character multiplies the number of guesses an attacker needs. A random 16-character password with mixed character types would take far longer to brute-force than any attacker has.

• Use a different password for every account, so one breach doesn't unlock the rest.
• Keep them in a password manager instead of trying to remember them all.
• Turn on multi-factor authentication wherever it's offered.

This generator uses your browser's cryptographic random number generator (crypto.getRandomValues). Similar-looking characters such as l, 1, O and 0 are left out to avoid typing mistakes.