Free Password Generator

How to use the password generator

1. Choose the length. Set 8 to 64 characters with the slider or number box. Use 16 or more for important accounts.
2. Select character types. Tick uppercase, lowercase, digits and symbols. Exclude look-alike characters if you will type the password by hand.
3. Generate the password. Press the button for a new random result. The strength meter shows an estimate based on length and character variety.
4. Copy and save it. Paste it into the password field of the account and keep it in a password manager.

Every password contains at least one character from each type you select. The tool uses your browser's crypto.getRandomValues function and avoids modulo bias when it picks characters, so every allowed character is equally likely.

What the strength meter means

The meter estimates entropy in bits by multiplying the password length by the base-2 logarithm of the number of possible characters. More bits means more guesses an attacker needs. It assumes a truly random password, so a password you invent yourself will be weaker than the figure suggests. Treat the meter as guidance and aim for the "Strong" band or higher for anything important.

Tips for strong passwords and passphrases

• Length beats complexity. A long random password is much harder to crack than a short one with a few symbols.
• Avoid personal details. Names, birthdays, phone numbers, vehicle numbers and favourite teams are among the first things attackers try.
• Try a passphrase for the few passwords you must remember, such as your device login or password-manager master password. Use four or five random, unrelated words and make it long.
• Do not make small changes such as adding 1 or ! to an old password. Attackers guess these patterns.
• Use a unique password per account. Never reuse a password, because one leak at a small website can expose your email and bank accounts too.

Use a password manager

You cannot memorise dozens of long random passwords. A reputable password manager creates, stores and fills them for you, protected by one strong master password. Choose a tool from a vendor you trust, protect it with two-factor authentication and keep an offline copy of its recovery details. PremiumAV is not a password manager, and it does not store or see the passwords you generate on this page.

Turn on two-factor authentication

Two-factor authentication (2FA) asks for a second proof, such as a code from an authenticator app, in addition to your password. It protects the account even if the password leaks. Turn it on for email first, then banking, social media, shopping and cloud storage. Prefer an authenticator app over SMS codes where you have the choice, and never share a one-time code with anyone. See our WhatsApp 6-digit code guide for a common example.

Passwords can still be stolen

A strong password cannot protect an account if malware on your PC records it, or if you type it into a fake login page. Keep Windows and your apps updated, avoid unexpected attachments and check links before you sign in. Our guides on phishing and UPI scam safety, checking if a website is legit, recovering a hacked Instagram account and checking your PC for a virus explain what to look for. If you suspect fraud in India, call 1930 or report at cybercrime.gov.in.

PremiumAV Total Security helps you scan your Windows PC for malware with Quick, Full and custom on-demand scans, and includes real-time file monitoring and a quarantine vault, as listed on the features page. See pricing or download the installer.

Frequently asked questions

Is this password generator safe to use?

Yes. The password is created in your browser by your own device and is never sent to our servers, stored or logged. For extra care, close the tab after copying the password.

How long should a strong password be?

Aim for at least 14 to 16 characters for important accounts, and longer for email, banking and password-manager master passwords. Length adds more strength than clever substitutions such as replacing letters with symbols.

What is a passphrase and is it better?

A passphrase is a string of several random words, such as four or five unrelated words. It can be easier to type and remember than a random string of symbols, as long as the words are chosen randomly and the phrase is long.

Do I need a password manager?

A reputable password manager lets you use a different long, random password for every account without memorising them. If you do not use one, store passwords only in a place you control and never in a plain note on your desktop.

Why exclude look-alike characters?

Characters such as I, l, 1, O and 0 are easy to confuse when you read or type a password by hand. Excluding them makes manual entry easier and slightly reduces the number of possible characters.

Does a strong password stop all account hacks?

No. A strong, unique password does not help if it is stolen by malware or entered on a phishing page. Turn on two-factor authentication, keep your PC updated and scan it for malware.