How to use this tool
This generates a strong random password on your own device. Nothing is sent to a server, and nothing is saved — if you close the tab, it's gone. That's by design: the only place your password should ever exist is in your memory or a password manager.
How strong is strong?
- 16 characters or more is the modern baseline for a site-specific password.
- Mixed types (upper, lower, numbers, symbols) make guessing and brute-force attacks far harder.
- Different password per site. This is the single most important rule — one breach shouldn't open the rest of your accounts.
Where to keep it
Use a password manager (Bitwarden, 1Password, or your browser's built-in one) rather than a spreadsheet or a note in a document. A manager stores it encrypted and fills it in for you, so you only need to remember one master password.
A word on symbols
Some older sites reject certain symbols. If that happens, untick 'Symbols' and make the password a bit longer instead — length beats symbol variety for strength.
Generate a fresh one for each important account, save it in a manager, and you've done the most for your security for very little effort.