Password Generator
Generate strong, secure passwords instantly. Customize to meet any website's requirements.
Click Generate to create a password
Password Options
Recent Passwords
Generated passwords will appear here (stored locally only)
Password Security Tips
Do
- • Use 16+ characters
- • Mix letters, numbers, symbols
- • Use unique password per site
- • Use a password manager
- • Enable 2FA where possible
Don't
- • Use personal info (names, dates)
- • Reuse passwords
- • Use dictionary words
- • Share passwords
- • Store in plain text
Best Practice
- • Use a password manager
- • Generate random passwords
- • Change after breaches
- • Check haveibeenpwned.com
- • Use passphrase for master
Password Strength Guide
| Strength | Length | Characters | Crack Time* |
|---|---|---|---|
| Weak | 8 chars | Letters only | Minutes |
| Fair | 10 chars | Letters + Numbers | Days |
| Good | 12 chars | Mixed + Symbols | Months |
| Strong | 16 chars | All types | Centuries |
| Very Strong | 20+ chars | All types | Millions of years |
*Estimated time for brute force attack with current computing power
Understanding Password Security
Password security is your first line of defence against cyber attacks. In 2024, the Australian Cyber Security Centre (ACSC) reported that weak or reused passwords remain one of the top causes of data breaches affecting Australian businesses and individuals. Understanding how passwords are cracked helps you create stronger ones.
Common Attack Methods
- Brute Force: Trying every possible combination systematically
- Dictionary Attack: Using lists of common words and passwords
- Credential Stuffing: Using leaked passwords from other breaches
- Phishing: Tricking users into revealing their passwords
- Rainbow Tables: Pre-computed hash lookup tables
Why Random Passwords Work
- High Entropy: More randomness = more possible combinations
- No Patterns: Can't be guessed using personal information
- Not in Dictionaries: Immune to word-based attacks
- Unique per Site: One breach doesn't compromise everything
- Length Advantage: Each character multiplies the difficulty
Password Entropy: The Math Behind Security
Password strength is measured in "bits of entropy" - a mathematical measure of unpredictability. Higher entropy
means more possible combinations and longer crack times. The formula is: Entropy = log₂(pool_size^length)
| Character Set | Pool Size | Bits per Char | 12-char Entropy |
|---|---|---|---|
| Numbers only (0-9) | 10 | 3.32 bits | ~40 bits |
| Lowercase letters (a-z) | 26 | 4.70 bits | ~56 bits |
| Mixed case (a-z, A-Z) | 52 | 5.70 bits | ~68 bits |
| Alphanumeric (a-z, A-Z, 0-9) | 62 | 5.95 bits | ~71 bits |
| All characters (recommended) | 95 | 6.57 bits | ~79 bits |
Security Benchmark
For strong security, aim for at least 80 bits of entropy. This means a 12-character password with all character types, or a 16-character alphanumeric password. At 80 bits, a password would take billions of years to crack with current technology.
Australian Cyber Security Centre (ACSC) Recommendations
The ACSC is part of the Australian Signals Directorate and provides official cybersecurity guidance for Australian individuals and businesses. Here are their key password recommendations:
For Personal Accounts
- • Use passphrases of 14+ characters
- • Enable multi-factor authentication (MFA)
- • Use a password manager
- • Never reuse passwords across sites
- • Check if your email is in known breaches
For Australian Businesses
- • Implement the Essential Eight security controls
- • Require MFA for all remote access
- • Use privileged access management
- • Regular security awareness training
- • Report cyber incidents to ReportCyber
Source: cyber.gov.au - Australian Government Cyber Security Centre
Passphrase vs Password: Which is Better?
Random Password
Example: K#9mPx$2vL@n
✓ High entropy per character
✓ Shorter length needed
✗ Hard to remember
✗ Difficult to type
Best for: Sites with password managers
Passphrase
Example: correct-horse-battery-staple
✓ Easy to remember
✓ Easy to type
✓ Can be very long
✗ Lower entropy per character
Best for: Master passwords, accounts you type often
Our Recommendation
Use a memorable passphrase for your password manager's master password (the one password you must remember), and use this generator to create unique random passwords for every other account. This gives you the best of both worlds: security and convenience.