Strong Password Generator

What makes a password strong

Two things: it's long, and it's unique to one account. Length matters more than anything else, because every extra character multiplies the time needed to crack it. And a password is only as safe as the account it's not reused on: if one site is breached, attackers try that same password everywhere else.

How long should it be?

For most accounts, aim for 16 characters or more. For anything important, email, banking, your domain and hosting, longer is better. The strength meter above estimates how much guessing it would take.

Random or memorable?

A random password (a jumble of letters, numbers, and symbols) is strongest and best stored in a password manager. A memorable one (a few random words) is easier to type by hand and still very strong when it's long, good for the one master password you actually have to remember.

The honest best practice

No one can remember a different strong password for every account. That's what a password manager is for: it generates and stores them, so you only remember one. Turn on two-factor authentication everywhere you can, too, it protects you even if a password leaks.