About the Password Generator
Reusing passwords, or choosing ones based on names and dates, is one of the most common ways accounts get broken into. A good password is long and random. This generator uses your browser’s cryptographically secure random number generator (the same Web Crypto API used for encryption), so the result cannot be predicted. Passwords are created on your device and are never sent to us or stored.
How to use the Password Generator
- Set the length with the slider. 16 characters or more is a strong choice for most accounts.
- Choose which character types to include: lowercase, uppercase, numbers and symbols.
- Tick "Avoid look-alikes" if you will need to read or type the password by hand.
- Copy the password and save it in a password manager.
The formula behind it
What makes a password strong?
Length matters most. Each extra character multiplies the number of possible passwords. The strength meter shows entropy in bits: every additional bit doubles the guesses an attacker would need. Around 60 bits is reasonable for everyday accounts, and 80 bits or more is very strong.
Current NIST guidance focuses on length and on blocking known-breached passwords, rather than on forcing regular changes or awkward composition rules.
Keep your passwords safe
A strong password is only one part of good security:
- Use a different password for every account.
- Store them in a reputable password manager instead of a note or spreadsheet.
- Turn on two-factor authentication wherever it is offered.
- Never send passwords by email or text message.
Frequently asked questions
Are these passwords really random?
Yes. They come from crypto.getRandomValues(), a cryptographically secure source built into modern browsers. We also use unbiased sampling so no character is more likely than another.
Do you see or store my passwords?
No. They are generated on your device and never leave your browser.
How long should my password be?
At least 12 characters, and 16 or more for important accounts such as email and banking.
Is a long passphrase better than a random password?
A passphrase of several random words can be just as strong and easier to remember, as long as the words are chosen randomly and not from a quote or song.
Sources
About the author: Ahmed Bilal
Ahmed Bilal is the founder of VolexTool and builds and maintains every calculator on the site. Tax rates and thresholds are taken directly from official sources such as GOV.UK, HMRC, the Canada Revenue Agency and the Australian Taxation Office, the formula is shown on every page, and each update must pass more than 600 automated checks before it goes live. Ahmed is not a tax adviser: for decisions about your own situation, speak to a qualified accountant or financial adviser.