How to use the password generator
- Choose Password for a random string or Passphrase for a memorable set of words.
- Set the length (16+ characters recommended) and the character types your site accepts.
- Press Copy and paste the result straight into your password manager.
How the strength estimate works
The meter estimates entropy from the length of the password and the size of the character pool it uses (lowercase, uppercase, digits and symbols). It then lowers the score for repeated characters and common sequences. The crack-time figure assumes an offline attack at 10 billion guesses per second, which is realistic for a modern GPU rig attacking a fast hash. Real-world risk is lower when sites use slow hashes such as bcrypt or Argon2, and much higher if you reuse a password that has already leaked.
Password best practices
- Use a unique password for every account, and let a password manager remember them.
- Turn on two-factor authentication, preferably with an authenticator app or a passkey.
- Change a password immediately if a service you use reports a breach.
- Never share passwords over chat or email. Use your password manager's secure sharing feature.