What makes a password strong
- Length: every extra character multiplies the difficulty of guessing it. Aim for 12 at least, and 16 or more on important accounts.
- Randomness: no names, dates, football teams or dictionary words.
- Uniqueness: a different password for every service.
Common mistakes
- Using your birth date, a pet’s name or “123456”.
- Changing just one number at the end (“Pass1”, “Pass2”) to remember it.
- Reusing the same one for email, bank and social media: if it leaks from one site, all fall.
- Keeping it in an unprotected phone note or on a paper in plain sight.
How to generate one with our tool
- Open the “Password Generator”.
- Choose the length with the slider: 16 is a good start.
- Select the character types. If a site rejects a symbol, turn symbols off.
- Tap Generate new until you like it and copy it with the Copy button.
- Save it right away in a password manager.
The password is created in your browser with a secure random source and is not sent or stored anywhere.
Where to keep your passwords
The most practical is a password manager: it remembers all the passwords for you and you only need to memorize one main password, long and good. The managers built into browsers also work, as long as you protect your account with a strong password.
Add two-step verification
Even if your password is excellent, turn on two-step verification for email, bank and social media. That way, even if someone gets the password, they also need the code from your phone.
What to do if a password leaks
Change it immediately on that site and on any other where you used it, starting with email. Check for access you do not recognize and, if the site allows it, sign out of all open sessions.
Frequently asked questions
Is a long phrase better than a password with symbols?
Length counts the most. A long, uncommon phrase can be strong, but a random password generated by a tool is even better if you keep it in a manager.
How often should I change it?
There is no need to change it out of habit if it is strong and unique. Change it if you suspect it leaked or if you reused it.
Is it safe to generate passwords on a web page?
It depends on the page. Here the process runs in your browser and the password is not sent to any server.