Create strong, random passwords in your browser — nothing is sent or stored.
Also searched as: 16 character password generator · strong password · password generator 16 characters
What makes a strong password
- Length matters most — 16+ characters is a good default; 12 is the minimum.
- Mix upper, lower, numbers and symbols.
- Unique for every site — a leak on one site shouldn't open your email or bank.
- Random — not names, birthdays or "Password@123".
How to remember them
You don't have to. Use a password manager (Google, Apple, Bitwarden) to store generated passwords and turn on two-factor authentication for email and banking.
Passwords are generated with your browser's secure random generator and never leave your device. We cannot see or store them.
How strong is it? The maths
Strength is measured in bits of entropy: log₂(possible passwords). A 12-character password drawing from 94 printable characters has 94¹² ≈ 4.8 × 10²³ combinations, about 79 bits. At 100 billion guesses a second (a serious offline cracking rig) that takes about 75,000 years on average (150,000 to try every one). Compare:
| Password style | Combinations | Time to crack (100 billion/s) |
|---|
| 8 lowercase letters | 2.1 × 10¹¹ | 2 seconds |
| 8 mixed letters + digits | 2.2 × 10¹⁴ | 37 minutes |
| 12 characters, all types | 4.8 × 10²³ | 150,000 years |
| 16 characters, all types | 3.7 × 10³¹ | longer than the age of the universe |
| 4 random dictionary words | ~7,000⁴ = 2.4 × 10¹⁵ | 7 hours — but easy to remember; use 6 words |
Where you need a different password
- Net banking and UPI apps: unique, 12+ characters; never reuse your email password here.
- Email: the master key — if it falls, every 'forgot password' link goes to the attacker. Use 16+ characters and 2-factor authentication.
- Wi-Fi: WPA2/WPA3 passphrase of 16+ characters; the generated one can be printed on the router.
- Government portals (income tax, EPFO, DigiLocker): most require 8–14 characters with a capital, number and symbol — tick all four boxes.
- Kids' accounts and shared OTT logins: still unique; use the 'avoid look-alikes' option so they can be read out aloud.
Tips and common mistakes
- Length beats complexity: 'correct-horse-battery-staple-mumbai' is stronger and easier than 'P@ssw0rd!'.
- Use a password manager (Bitwarden, Apple/Google Passwords) to store generated passwords; then you only remember one.
- Turn on 2-factor authentication — an authenticator app, not SMS where possible — on email, bank and social accounts.
- Never type a real password into a 'strength checker' website. This tool generates locally and never sends anything.
Frequently asked questions
How long should a password be?
At least 12 characters; 16 or more for email, banking and anything important.
Is this generator safe?
Yes. It uses the browser's cryptographic random source and nothing is transmitted or stored.
What is entropy?
A measure of unpredictability in bits. 60+ bits is strong for online accounts; the meter above shows it.