HOW-TO

How to generate a strong password

Length beats complexity. Learn what makes a password strong and generate a random one free.

A strong password is long and random. Length matters far more than swapping letters for symbols in a predictable way — here is how to think about it and generate one that is genuinely hard to guess.

Length beats cleverness

Each extra character multiplies the number of guesses an attacker needs. A 20-character random password from a large alphabet is astronomically harder to brute-force than a short one with a few symbol substitutions. "P@ssw0rd!" is weak; a long random string is not.

Randomness is the key

Humans are predictable — we reuse patterns, dates, and words. A cryptographically random generator removes that bias. Generate a unique password per site and store them in a password manager so you never reuse one.

Step by step

1

Choose a length of at least 16 characters — 20+ for important accounts.

2

Include symbols unless the site forbids them (our generator toggles this).

3

Generate a fresh random password and copy it.

4

Store it in a password manager rather than memorizing or reusing it.

5

Turn on 2FA (TOTP) on top of the password for accounts that support it.

Try it now — free, no signup

Use the password generator in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

FAQ

How long should a password be?›
At least 16 characters; 20 or more for email, banking, and password-manager master passwords.
Are symbols required?›
They help, but length matters more. A long random alphanumeric password can be stronger than a short one packed with symbols.

Related