How to Generate a Secure Random Password
The most common cause of account breaches isn't sophisticated hacking — it's weak or reused passwords. A truly random password generated by a tool is far more secure than anything a human can invent. Here's how password strength works and how to generate one that holds up.
What Makes a Password Secure?
Password strength comes from two things: length and randomness. Length matters more than complexity — a 20-character random lowercase password is stronger than a 10-character mixed-case one.
| Password | Strength | Time to crack (estimated) |
|---|---|---|
| password | Very weak | Instant (dictionary attack) |
| P@ssw0rd | Weak | Seconds (common substitution) |
| Fluffy2019! | Moderate | Minutes to hours |
| Xk#9mP2q | Good | Days to months |
| zR4@vLp9!mQx2# | Strong | Centuries |
| j7$Kp2!nR8@vLq4#Yw | Very strong | Longer than the universe |
The Three Rules of Secure Passwords
1. Long
Use at least 16 characters for important accounts. Each additional character exponentially increases the time to crack. Length beats complexity.
2. Random
Human-chosen passwords follow predictable patterns (favourite pet, birth year, common word + symbol). A random password generator uses cryptographic randomness that has no pattern.
3. Unique
Never reuse passwords across sites. When one site leaks (and they do — check haveibeenpwned.com), attackers immediately try the same password on hundreds of other sites. This is called credential stuffing.
How to Use a Password Generator
Our Password Generator creates cryptographically random passwords in your browser. Your passwords are never sent to any server.
- Open the Password Generator
- Set the length — 16 characters for most accounts, 24+ for high-value accounts (banking, email)
- Select character types: uppercase, lowercase, numbers, symbols
- Click Generate and copy the result
- Save it immediately in your password manager — don't try to memorise it
Where to Store Generated Passwords
A random 20-character password is useless if you can't retrieve it. Use a password manager:
Free, open-source, cross-platform. Recommended for most users.
Paid, polished UI, good for families and teams.
Free, built into iOS/macOS/Safari. Limited to Apple ecosystem.
Free, built into Chrome and Android. Tied to your Google account.
When to Use a Passphrase Instead
For passwords you must type regularly (computer login, password manager master password), a passphrase is a good alternative. Pick 4–6 random unrelated words:
correct-horse-battery-staple-river
A 5-word passphrase from a 7,000-word list has ~61 bits of entropy — equivalent to a random 10-character mixed-character password, but far easier to remember and type.
Generate a secure random password — free