Password Generator: Strong Random Passwords
Generate a random password or passphrase on your device, then copy it for your new account.
Password Settings
Choose 8 to 128 characters. The default is 16.
Choose 4 to 10 random words. The default is 6.
Your Generated Password
Password or passphrase
Estimated randomness
Generated in your browser
Preparing your password.
How the Password Generator Works
This password generator creates a fresh random password in your browser. Choose the length and character types, or switch to a passphrase. Copy the result into your password manager and use it for one account.
The generator uses the browser’s cryptographic random number generator, crypto.getRandomValues(). It discards random values that would favour some characters or words. Each selected character type appears at least once in a password.
Generated passwords are never uploaded, sent to analytics or saved by this tool. Leaving the page clears the result. Copying puts it on your device’s clipboard, where other permitted apps or clipboard history can retain it.
The randomness estimate counts possible outputs under your settings. Its bands are low below 50 bits, moderate from 50 to below 75 bits and high from 75 bits. These are this tool’s labels. They do not predict cracking time or measure phishing risk, device security or password reuse.
How Long Should a Password Be?
Use at least 15 characters, following the Australian Signals Directorate’s password guidance. The default here is 16. A 12-character or 14-character password falls below that advice, even with symbols.
Adding length increases the number of possible guesses. With numbers alone, 12 random characters have one trillion possible combinations. At 16 characters, there are ten quadrillion. Both still use a smaller character set than a password that includes letters.
Use the character controls to meet the lender portal or CRM’s rules. Choosing 8 or 10 characters makes a shorter result, which is useful only when an account imposes that limit. Use the longest supported length and enable two-factor authentication. A predictable word with a symbol added remains predictable.
Passphrases vs Random Passwords
A passphrase helps when you need to remember or type a password, such as the password that unlocks your password manager. A random character password suits accounts your manager fills automatically.
This tool selects each word independently from the Electronic Frontier Foundation’s 7,776-word long list and separates the words with spaces. The EFF recommends at least six words from a list this size. Six words give about 77.55 bits of randomness. Four give about 51.7 bits.
Keep the generated words in their random order. Replacing them with a quote, a familiar phrase or details about your family makes the result easier to guess. Spaces help you read the words but add no randomness to this estimate. Use password mode if an account refuses spaces.
The bundled word list is by the Electronic Frontier Foundation, used under its Creative Commons Attribution licence. Word selection happens on your device.
Store Passwords in a Password Manager
A password manager stores a different password for each account, so staff can avoid reusing a lender portal password for email or a CRM. For a small business, choose one with managed staff access and a way to remove access when someone leaves.
Bitwarden’s generator creates passwords and passphrases in its apps. The LastPass password generator lets you choose length and character types. Norton Password Manager also has a generator. Chrome can suggest and save a password through Google Password Manager.
Generate inside your manager when you want to save a new login directly. If you use this page, save the copied password before closing it. Protect the manager with a strong, unique master password and two-factor authentication. Enable a second factor on each business account that supports it.
