Guides / Passwords

How to Create a Strong Password

Most account breaches start with weak or reused passwords. A strong password is long, unique and random. Here is how to get there.

Length beats complexity

Password strength depends on how many possible combinations an attacker must try. Each extra character multiplies that number. A 16-character password made of random letters, numbers and symbols is far harder to crack than an 8-character one, even if the shorter one uses more symbol types. The current NIST guidance favours length and screening against known breached passwords over forced character rules.

Why randomness matters

Passwords like "Summer2026!" look complex but follow patterns that attackers test first. A truly random password has no pattern to exploit. Random generators are the reliable choice when you do not need to remember the password.

Use a unique password for every account

If one site leaks your password, attackers try it on email and banking sites. A unique password for each account stops one breach from spreading. A password manager makes this practical.

Turn on two-factor authentication

Even a strong password can be phished. Adding a second factor, such as an authenticator app or a security key, protects the account if the password is stolen.

Generate one now

The Password Generator uses your browser's secure random number source. Choose a length of at least 16 characters and keep all four character types selected for most accounts. The password is shown on screen only and is never stored or sent anywhere. Copy it straight into a password manager.