Length first
Additional random characters multiply the search space and generally matter more than cosmetic substitutions.
Security guide
Understand what makes a generated password useful
Generation is only one step. Uniqueness, length, storage and multi-factor authentication all matter after the secret is created.
- Free — no subscription.
- No account — no sign-up.
- On your device — no secret sent.
The basics
Three habits that matter more than any rule
A generated password is only useful if it is long, unique and stored safely.
Unique per service
Never reuse the same generated secret across different accounts.
Store it safely
Save account passwords in a suitable password manager and enable multi-factor authentication where available.
Questions
Frequently asked
What is password entropy?
It measures, in bits, how many guesses an attacker would need in the worst case. Each extra bit doubles the search space.
What length should I choose?
At least 16 random characters for an account stored in a password manager. The Balanced profile starts at 18.
Password or passphrase?
A random password for anything your manager fills in. A random passphrase for what you have to type from memory.
One minute, no more
Generate your next password
Free, without an account, created in your browser.