Password generator
Make a strong password in one click. Passphrases of random words are the easiest to remember and among the hardest to crack. Everything happens on your device, so nothing is sent to us or anyone else.
Strength appears here.
Generated on your device using your browser’s secure random number generator. Nothing is sent to us or stored anywhere.
Passwords, answered
Length and unpredictability. A password made of four or five random words is far harder to crack than a short one with a few symbols swapped in, and much easier to remember. What matters is that the words are chosen at random, not by you.
For passwords you have to type or remember, yes. Five random words is as strong as a long string of random characters and far easier to live with. For passwords stored in a password manager, random characters are fine because you never type them.
Yes. Passwords are created in your browser using its cryptographic random number generator, the same one used for encryption. Nothing is sent to our servers, logged or stored.
In a password manager. It lets you use a different strong password for every account without remembering them, and it will not fill in your password on a fake site. Add multi-factor authentication to the important accounts too.
At least 12 characters, and longer is better. The UK's National Cyber Security Centre recommends using three random words as a simple way to get there. Cyber Essentials also expects passwords to be protected by multi-factor authentication or limits on repeated guessing.
Not sure where your biggest risks are?
The free two-minute security check gives you a scored report and the next thing to fix.