Password Generator

How to use the Password Generator

1. Set your desired password length using the slider or input field.
2. Toggle the character types you want to include: uppercase, lowercase, numbers, and symbols.
3. Review the generated password and check the entropy meter to confirm it meets your strength requirements.
4. Click the Copy button to copy the password to your clipboard.
5. Paste the password into your sign-up form or password manager. Generate a new one anytime by adjusting the settings.

Length vs. complexity

A 16-character password using only lowercase letters and numbers is harder to brute-force than an 8-character password stuffed with symbols. Length increases the search space exponentially, while extra character types increase it only linearly. NIST's current password guidance (SP 800-63B) actually de-emphasizes forced complexity rules and emphasizes length and screening against known-breached password lists instead. Practically: default to 16+ characters here whenever a site allows it, and only shorten if you're hitting an actual field limit.

Frequently asked questions

How long should my password be?

16 characters or more for anything important (email, banking, password manager master password); 12 is a reasonable floor for lower-stakes accounts if a site caps length.

Should I include symbols?

Include them if the site requires them; if it doesn't, extra length usually strengthens a password more than adding symbols to a shorter one.

Is it safe to generate a password for my bank account in a browser tool?

Generation happens locally in your browser and nothing is transmitted, but as a general practice, only ever type a password like this directly into the site you're creating it for. Never paste a generated password anywhere else first.

Should I reuse a strong password across sites?

No. A strong-but-reused password means one breached site compromises every account using it. A password manager solves this better than memorizing several strong passwords.