Password Generator
Frequently asked questions
What makes a password strong?
Randomness, not meaning. A password like "May2026Work!" is vulnerable to a targeted guess based on personal details, even if it is formally long and complex. Uniqueness for each service. One password for every account means a leak on one site opens the door to all the others. Absence from leak databases. Even a random but short password may already appear in the dictionaries used for brute-forcing. A random combination is hard to remember – that is normal and expected: managers, not memory or a file on the desktop, are what such strings are meant to be stored in.
How is a generated password better than one made up by hand?
When a person comes up with a complex password, they almost always lean on something familiar: a date, a name, a keyboard pattern, swapping letters for digits. All these tricks are well known and built into brute-force dictionaries. A generator picks characters with no such pattern, so a password of the same length turns out to be orders of magnitude harder to guess.
Can I get the same password again?
No, there is no history or saved-passwords screen in the interface – the exact same password cannot be retrieved again, only a new one generated. That’s why a generated password is worth moving straight into a password manager rather than leaving it on screen longer than needed.
Why shouldn't the same password be used for every site?
When one service's database leaks, attackers first try that same password on other popular sites – this technique is called credential stuffing and remains one of the most common causes of account takeovers.
Is it necessary to include symbols?
Not necessarily, if the password is long enough: a long password made only of letters and digits can be stronger than a short one with symbols. But at equal length, symbols always add strength.
How can a complex generated password be remembered?
There is no need to remember it – that is exactly what password managers are for: they store passwords encrypted and fill them in automatically. The only thing that needs to stay in memory is the one master password to the manager itself.
Set the password length, the number of options and the character set – lowercase, uppercase, digits and symbols – and get ready-made passwords in one click.
Generator settings
The form has six independent parameters.
| Parameter | What it means |
|---|---|
| Length | the number of characters in one combination |
| Number of passwords | how many options to return at once |
| Lowercase | includes lowercase letters a–z |
| Uppercase | includes uppercase letters A–Z |
| Digits | includes digits 0–9 |
| Symbols | includes symbols such as !, @, #, % |
The checkboxes can be combined in any way: digits only for a PIN code, an alphanumeric password without symbols, or all four categories at once for maximum complexity. Lowercase characters in the password are switched on by their own checkbox, so they can be turned off too.
What password length to choose
| Length | When it is enough |
|---|---|
| 8 characters | a minimum for non-critical accounts, no longer considered secure today |
| 12 characters | a working minimum for most services when all character categories are used |
| 16 characters | the recommended level for email, banking and financial services |
| 20+ characters | for a master password to a password manager, which protects all the others |
Each extra character and each enabled category increases the number of possible combinations exponentially, so length affects a password's strength more than adding one more character type to an already complex set.
Related tools
For a checksum of a file or a string, rather than a password, use the MD5 and hash generator. If what is needed is not a password but an unpredictable number within a given range, the random number generator fits.