Password Generator

A strong password is at least 12 to 16 characters long and combines uppercase letters, lowercase letters, numbers, and symbols. Avoid dictionary words, names, and predictable patterns. Randomly generated passwords are significantly harder to crack than ones you invent yourself.

If one site gets breached and you reuse passwords, attackers will try the same credentials on other services (a technique called credential stuffing). Unique passwords per account contain the damage to a single service.

Change a password immediately if a service reports a data breach, if you suspect unauthorized access, or if you shared it with someone. Routine periodic changes are less important than using strong, unique passwords from the start.

A password manager stores all your passwords in an encrypted vault. It generates a unique password for every account and autofills it when you log in, so you only need to remember one master password.

Ambiguous characters are visually similar glyphs like the letter O and digit 0, or lowercase l and the digit 1. Excluding them makes generated passwords easier to read and type manually without errors.

Two-factor authentication (2FA) adds a second verification step on top of your password, like a code from an authenticator app. Even if your password is compromised, an attacker still cannot access your account without that second factor.