Build a fresh secret
Length first. Then the site’s rules.
Set a length, choose the character groups the destination accepts, and generate a new password for that account. There is deliberately no sample password here to copy into a real account.
Length
Each additional random position adds possibilities. Choose a long value supported by the service, rather than shortening it just to make it easy to remember. A password manager can keep it for you.
Character groups
Lowercase, uppercase, numbers, and symbols define the pool. The generator includes at least one character from each selected group when the length allows, fills the remaining positions, and shuffles them.
If the site rejects a symbol, adjust the allowed groups and generate again. Avoid repeatedly editing the same password into a familiar pattern.
A meter is a model, not a promise
The strength label estimates possibilities from the selected length and pool size. It is not a breach lookup, a measured cracking time, or a guarantee that an account is protected. The forced inclusion of selected groups also means the simple pool-size estimate is not an exact description of every generated outcome.
Random choices use the browser’s Web Crypto generator. The tool does not ask for an existing password, check an account, or send generated values to a server.
| Situation | Adjustment |
|---|---|
| You must read it aloud | Exclude ambiguous characters to remove selected look-alikes, then confirm the destination accepts the result. |
| The service disallows symbols | Turn symbols off and use an adequate supported length. |
| No output appears | Select at least one character group. |
| Another account needs a password | Generate a separate value; do not reuse the first one. |
After generating
Copy the value into the intended account form and save it in your password manager. Check that it was accepted before leaving the setup flow. A clipboard may be visible to other apps or clipboard-history tools, even though this page does not upload the password.
Use a unique password for each account and enable multifactor authentication where available, as outlined in CISA’s account security guidance. Reloading or leaving this tool discards its current state; it is a generator, not a password vault.