Password Generator

Most account breaches do not involve a clever attack on encryption. They involve a password that was reused from a site that leaked years ago, or one short enough to fall to an automated guessing run. A password generator solves both problems at once by producing a long, random string that has never existed anywhere else and that no pattern in your personal life could suggest.

Human-invented passwords are predictable in ways we do not notice. We favour real words, we put the capital letter first, we put the digit and the exclamation mark at the end, and we substitute 3 for E as though attackers had not thought of that. Cracking software models these habits directly. Random generation removes the habit entirely: every character is drawn independently using your browser's cryptographic random number generator.

Length is the single most valuable dial. Each extra character multiplies the search space, so a sixteen-character random password is astronomically harder to brute force than a ten-character one, regardless of how many symbols you sprinkle into the shorter option. Generate long, store the result in a password manager, and enable two-factor authentication wherever it is offered.

How to use the Password Generator

1. Choose a length; sixteen characters or more is a sensible default for important accounts.
2. Select which character sets to include: lower case, upper case, digits and symbols.
3. Generate the password and check the strength indication.
4. Copy it straight into the password field of the site you are securing.
5. Save it immediately in a password manager, because you are not meant to memorise it.

Examples

• Someone recovering from a data breach notification generates a unique password for every account that shared the compromised one.
• An IT administrator creates a long service account credential that will live in a secrets vault rather than in anyone's head.
• A small business owner sets up a new payroll login and wants a credential no employee could guess from company trivia.

Frequently asked questions

Is the password sent over the internet?

No. Generation happens entirely in your browser using the Web Crypto API, and the value is never transmitted or stored by us.

How long should a password be?

Twelve characters is a floor, sixteen is a comfortable default, and twenty or more is appropriate for email, banking and password manager master credentials.

Should I include symbols?

They help, but adding length helps more. If a site rejects certain symbols, compensate by making the password longer.

How do I remember these?

You do not. Use a password manager and memorise only its master passphrase, which is where our Passphrase Generator is useful.

Is it safe to reuse a generated password on two sites?

No. Reuse is exactly what turns one site's breach into a compromise of all your accounts. Generate a fresh one each time.

Read our related guide for more on getting the most from the Password Generator.

SwiftMultiTool — free online tools for everyone. Home · Blog · About · FAQ · Contact