How to Create a Strong Password You Can Actually Use
Most hacked passwords aren't guessed by a person — they are cracked by software that tries billions of common passwords, dictionary words and predictable patterns. “P@ssw0rd2024!” looks strong but falls in seconds.
A strong password is simply one that is long and truly random. Here is how to make one — and how to make it memorable.
Step by step
- Open the Password Generator and choose random characters, a passphrase or an easy-to-say password.
- Set the length and the characters to use or avoid.
- Copy it into your password manager — or generate a batch and download the list.
How long should a password be?
At least 12–16 random characters for everyday accounts, and 20 or more for a password manager's master password or your Wi-Fi. Every extra character multiplies the number of guesses an attacker needs.
Passphrases: strong and memorable
A passphrase strings together several random words, like “Orbit-Canal-Mango-Stew-42”. Five words picked at random from the 7,776-word EFF list give about 65 bits of entropy — very hard to crack, yet easy to remember and type.
Habits that matter more than any single password
- Use a different password for every account — one leak then can't unlock the rest.
- Keep them in a password manager instead of your memory.
- Turn on two-factor authentication wherever it is offered.
- Check whether a password has appeared in a known breach with the Password Strength checker.
Frequently asked questions
Are generated passwords really random?
Yes. They come from your browser's cryptographically secure random generator, so every character is equally likely.
Is the password sent anywhere?
No. It is generated in your browser and never uploaded or logged.
Are look-alike characters a problem?
They can be when you type a password by hand. Turn on the option to skip characters like 0 and O or 1 and l.