Choose a strong password

A password is strong when it is hard to guess and it is not reused. Length does more work than a clever substitution such as swapping a letter for a symbol. A long random password is difficult to remember and easy for a password manager to store. A passphrase of several unrelated words is easier to type on a phone and can still be strong if the words are chosen at random and the phrase is long enough.

The generator offers both. Random mode builds a string from the character sets you tick. Passphrase mode picks words from a fixed list with the same random source. You can make more than one at a time, copy the result, and clear it. Nothing is written to an account, because there is no account. Closing the tab drops the values held in memory.

Do not generate a password on a computer you do not trust, and do not leave it on a shared screen. The tool cannot see whether you later reuse that password on another site. Reuse is the failure mode that turns one leaked database into many unlocked accounts. A manager, or a written copy stored as carefully as a bank card, is safer than a pattern you repeat with the site name tacked on the end.

The entropy meter is a guide to the space of possible passwords for the settings you picked. It is not a promise about a particular website’s storage. Some sites still reject long passwords or spaces. If a site does, use the longest value it allows and turn on its own second factor. A strong password does not replace that second factor.

This page will not put your generated password in the address bar. Links are reserved for non-sensitive values such as calculator inputs. If you need a hash of a string you already have, that is a different tool, the hash generator, and it is also local.