Как создать надёжный пароль

A strong password is long, random and used for only one account. Aim for at least 16 characters, mixing lowercase and capital letters, numbers and symbols, and let a generator pick them so there's no pattern to guess. The free password generator does this in one click on your own device: set the length, choose the character types, press Generate and Copy. Then save it in a password manager so you never have to remember it.

Most accounts aren't broken into by someone cleverly guessing your password. They're broken into because a password was short, reused on a site that leaked it, or based on something predictable. Fixing those three things is most of the job.

What makes a password strong

Length. Every extra character multiplies the number of possible passwords. Length matters more than any other single choice.

Randomness. "Summer2026!" looks like it mixes everything, but attackers try words, names, dates and common substitutions (@ for a, 0 for o) first. Truly random characters have no pattern to exploit.

Uniqueness. A password reused on several sites is only as safe as the weakest of those sites. When one leaks, attackers try the same email and password everywhere else.

How long is long enough?

Password strength is often measured in bits of entropy: how many yes/no guesses it would take to cover every possibility. With all four character types switched on, the generator picks from 85 characters, which is about 6.4 bits per character:

Length	Possible passwords	Strength
8	about 2.7 × 10^15	about 51 bits: too short for important accounts
12	about 1.4 × 10^23	about 77 bits: reasonable for low-value accounts
16	about 7.4 × 10^30	about 103 bits: strong
20	about 3.9 × 10^38	about 128 bits: very strong

For email, banking, and anything that can reset other accounts, use 16 characters or more. Since a password manager remembers it for you, 20 costs you nothing extra.

Как это сделать create a password with the generator

1. Open the free password generator.
2. Drag the Length slider. It goes from 8 to 128 characters and starts at 20.
3. Tick the character types you want: Lowercase, Uppercase, Numbers and Symbols. All four are on to start with.
4. Press Generate.
5. Press Copy and paste the password into the sign-up or change-password form, and into your password manager.

Each character is picked with equal odds using your browser's secure random number source. The password is created on your device, never sent to us, and disappears when you close the page.

Вопрос: a site rejects the password

Some sites have their own rules. A few common ones and what to do:

• "Must include a number" or "a symbol". Each character is drawn at random from all the types you ticked, so a password usually contains every type, but not always. A 20-character password has roughly an 8% chance of having no digit. If a site complains, press Generate again.
• "That symbol isn't allowed." Untick Symbols and make the password a few characters longer to make up for it.
• "Maximum 16 characters". Set the slider to the site's maximum.

Passwords you need to type or remember

A generated password is perfect for anything stored in a password manager. For the few passwords you must type from memory, such as your computer login or the password manager's own master password, a passphrase of several random, unrelated words is easier to remember and still long. Pick the words randomly (dice or a random picker), not from a favourite quote or song, and use at least six words.

Habits that matter as much as the password

• Use a password manager. It creates, stores and fills a different password for every site. Most browsers and phones include one.
• Turn on two-step verification (2FA) for email, banking and social accounts. Even if a password leaks, the attacker also needs your code.
• Never reuse a password, especially your email password. Email is the key to resetting everything else.
• Change a password straight away if a site tells you it's had a breach.
• Don't share passwords over chat or email. Use your password manager's sharing feature if you must share.

A note for developers

If you're building an app, don't store passwords as plain text or with a plain fast hash. The free hash generator is useful for checksums and checking downloads, but storing passwords needs a slow, salted algorithm designed for passwords, such as bcrypt, scrypt or Argon2.

For Wi-Fi, a long random password is easy to live with if you put it in a QR code that guests scan instead of typing. See how to make a Wi-Fi QR code.

Make one now

Pick a length of 16 or more, keep all four character types ticked, and press Generate. The free password generator runs entirely on your device, so nobody else ever sees your password.