Strong Password Generator
Generate a genuinely strong password — long, random and cryptographically secure. Nothing leaves your browser.
What counts as a strong password?
Security experts measure password strength in bits of entropy rather than in "must contain a symbol" rules. A password is strong when it is random, long and unique. The generator above defaults to 20 characters drawn from a 94-character pool, which is about 131 bits of entropy — far beyond the reach of any brute-force attack.
Strong password checklist
- 20 characters or longer for email, banking and work accounts.
- Mix uppercase, lowercase, digits and symbols.
- No names, dates, keyboard walks or dictionary words.
- A different password for every single account.
- Stored in a password manager, protected by a strong master password and 2FA.
Common mistakes to avoid
Substituting letters for symbols (a to @, o to 0) adds almost no strength because cracking tools apply those rules automatically. Appending "123" or "!" to a memorable word is similarly ineffective. Randomness is the only reliable defence.
Frequently asked questions
How strong is a 20-character random password?
Roughly 131 bits of entropy with all character types enabled — computationally infeasible to brute force.
Are symbols required for a strong password?
They help, but length matters more. A 24-character letters-and-digits password is stronger than a 10-character password with symbols.
Where should I store a strong password?
In a password manager. Strong passwords are not meant to be memorised.