Free tool
Strong password generator
Make a random password or an easy-to-type passphrase. It is generated in your browser with its secure random number generator, and never sent or saved anywhere.
Random characters or a passphrase?
Both are strong when they are long and truly random. Random characters pack the most strength into the fewest characters, so they suit a password manager that types them for you. A passphrase of five or six random words is nearly as strong and much easier to type on a phone or TV, or to remember for the one password you can't store: your Mac's login or your password manager's.
The passphrase words come from a list of 2,048 common English words, picked at random, so each word adds 11 bits of strength. Five words make about 55 bits, plus the digit; six or more is better for an important account.
How long should a password be?
- Websites and apps: 16 random characters or more. With a password manager, length costs you nothing.
- Your Mac, your email and your password manager: a passphrase of six words or more, written nowhere but your memory.
- Wi-Fi: 20 characters or more; you type it once per device.
Keep every password unique
A strong password reused on a site that leaks becomes a weak one everywhere. Use a different password for each site and let the Passwords app on your Mac remember them. To see whether a password you already use has leaked, try our password checker.
Questions about generating passwords
Yes. The password is made on this page by your browser's cryptographic random number generator (crypto.getRandomValues). It is never sent to us or anyone else, and disappears when you close the page.
Yes. When you create an account in Safari, it suggests a strong password and saves it in the Passwords app. This generator is handy for other browsers, apps, Wi-Fi networks and passphrases.
It measures how many guesses a random password takes to find: each extra bit doubles them. Around 60 bits is strong for a website, 80 bits or more is out of reach of any attacker today.
More free security tools
Website scam checker
Type a site or paste a link: our scam and phishing lists, the domain's age and look-alike names.
Open the tool →Scam message checker
Paste an email, text or DM: the scam signs in it, and its links checked against our lists.
Open the tool →Password checker
Has a password leaked in a data breach, and how long would it take to crack? It never leaves your browser.
Open the tool →Email header analyzer
Paste an email's headers: SPF, DKIM and DMARC, the real sender, and where replies would go.
Open the tool →Mac app vulnerability checker
Is your version of Chrome, Firefox, VLC or another app safe? Known holes and the version that fixes them.
Open the tool →Report a harmful site
Found a phishing page, fake shop or scam site? Report it and we'll review it for our lists.
Open the tool →Has my Mac been hacked? How to check, and what to do
Phishing, malware or real access: the places to check, and what to do in each case.
Read the guide →Stay protected with Tidy My Mac
Scan your Mac for malware, free for 7 days.
Just your email, no credit card. Then $19.99 for your first year, $59.99 a year after that.
Scan your Mac free