Password Generator

How do I create a strong password?

Result

euIuwZ2OnF1n6xnl

How it is calculated

Each character is drawn independently and uniformly from a character set using the operating system's cryptographically secure random number generator. The type option picks the set: basic is 52 letters (a-z, A-Z), alnum adds the 10 digits for 62 characters, and any other value uses all 80 characters, including the symbols !@#$%^&*()-_=+[]{}. Length is a whole number: empty or invalid values become 16, anything under 4 is raised to 4, and anything above 128 is cut to 128. Strength in bits is length × log₂(set size). Every click produces a new password.

Worked example

Sample run on 2026-10-17 with length 16 and the letters-and-digits set (62 characters). The tool produced ZRqDoQbTnHC5mseE. Strength is 16 × log₂(62) ≈ 16 × 5.95 = about 95 bits. With the full 80-character set the same length gives roughly 101 bits, and with letters only about 91 bits. The next run gives a different string.

Try this example →

Common mistakes

  • Reusing one generated password on several accounts. Strength does not help if a single leak exposes them all.
  • Choosing a short length because symbols are enabled. Each extra character adds more strength than widening the set.
  • Picking the letters-and-digits set for a site that requires a symbol, then being rejected at sign-up. Use the full set for those sites.
  • Copying the password through an insecure place such as a chat message or a shared note instead of straight into a password manager.
  • Typing a length below 4 or above 128 and expecting it to be honoured. The tool silently changes it to 4 or 128.

About this calculator

This tool creates random character strings by pulling from pools like uppercase and lowercase letters, digits, and symbols, based on a length and character-set selection the user chooses. Because the output is generated randomly rather than following a pattern, it resists the kind of guessing and dictionary-based attacks that predictable passwords fall to, and longer, more varied strings take meaningfully longer to crack by brute force.

People use it whenever they need a unique credential for a new account, especially when relying on a password manager anyway and there's no need for the password to be memorable. It's also used to generate temporary passwords, Wi-Fi keys, or any string where randomness and unpredictability matter more than ease of typing.

Was this helpful?

You can pick up to 3 reactions.

Comments (1)

  • Editorial team

    Characters are drawn independently, so a password from the full set is not guaranteed to contain a digit or a symbol. If a site insists on one of each, simply generate again until it qualifies. Some sites also reject certain symbols; then switch to letters and digits and add one extra character, because 17 of those carry about as much strength as 16 from the full set. Which rule from a website has given you the most trouble when creating a password?

Popular calculators

All Calculators