Strong Password Generator
Generate a genuinely strong password — long, random and cryptographically secure. Nothing leaves your browser.
What counts as a strong password?
Security experts measure password strength in bits of entropy rather than in "must contain a symbol" rules. A password is strong when it is random, long and unique. The generator above defaults to 20 characters drawn from a 91-character pool, which is about 130 bits of entropy — well beyond what current brute-force and cracking techniques can realistically overcome when the password is unique and generated uniformly at random.
Strong password checklist
- 20 characters or longer for email, banking and work accounts.
- Mix uppercase, lowercase, digits and symbols.
- No names, dates, keyboard walks or dictionary words.
- A different password for every single account.
- Stored in a password manager, protected by a strong master password and 2FA.
Common mistakes to avoid
Substituting letters for symbols (a to @, o to 0) adds almost no strength because cracking tools apply those rules automatically. Appending "123" or "!" to a memorable word is similarly ineffective. Randomness helps eliminate predictable patterns, while length, uniqueness per account, and secure storage in a password manager are equally critical to real-world password security.
Frequently asked questions
How strong is a 20-character random password?
Roughly 130 bits of entropy with all character types enabled — well beyond what current brute-force techniques can realistically overcome.
Are symbols required for a strong password?
They help, but length matters more. A 24-character letters-and-digits password is stronger than a 10-character password with symbols.
Where should I store a strong password?
In a password manager. Strong passwords are not meant to be memorised.