Make a password nobody can crack

Generate a strong passphrase or random password in one click and see how long it would really take to crack.

Make my password
  • Private by designMade on your device. Nothing is sent to us or anyone else.
  • Truly randomUses your browser's secure random number generator.
  • Built to be strongLong, random and free of common words, so nothing in it can be guessed.
Your new passphrase
Commodity-Ascent-T-shirt-Fridge-Dyslexic-38
Strong
  • 5B yearsto crack if stolen
  • 71 bitsof randomness
  • 43characters

Make it yours

Words
Separator
Letters
Digits

Made in your browser. Nothing is sent to us or stored.

The odds

How long would it take to crack?

The same password faces very different odds depending on where an attacker finds it. These figures follow the password you are working on above.

Website login

100 guesses an hour

Stolen, well protected

10,000 guesses a second

Stolen, poorly protected

100 billion guesses a second

Estimates only. They assume an average-length search at the speeds shown, and an attacker who knows how the password was made. Real attackers, hardware and websites vary, and faster hardware shortens every figure.
Stay safe

Six habits that protect your accounts

A strong password is only one layer. These habits make the biggest difference for you and your team, in order of impact.

  1. Biggest impact

    Turn on multi-factor authentication

    Even if someone learns your password, they still need your phone or security key to get in. It stops most account takeovers.

    Do thisStart with your email, banking and work accounts. Use an authenticator app or passkey rather than text messages where you can.
  2. Big impact

    Use a password manager

    It creates and remembers a long random password for every account, so you only have to remember one strong passphrase.

    Do thisChoose a reputable one, or use the one built into your phone or browser, and move your most important accounts in first.
  3. Big impact

    Never reuse a password

    Attackers take passwords leaked from one site and try them everywhere else. This is called credential stuffing, and it works because people reuse.

    Do thisCheck your email, banking and work logins first, and change any that share a password.
  4. Easy win

    Make the ones you remember long

    Length beats clever symbols. Random words are easier to remember and type, and far harder to crack than "P@ssw0rd!".

    Do thisUse a five-word passphrase for your computer login and your password manager. Make one above.
  5. Good to know

    Do not change them on a schedule

    Forced regular changes push people towards predictable tweaks such as Password1 to Password2. The NCSC advises against it.

    Do thisChange a password straight away if it appears in a breach, or if you think someone else has it.
  6. Stay alert

    Watch for fake login pages

    A strong password cannot protect you if you type it into a lookalike site. Phishing emails are the most common way passwords are stolen.

    Do thisOpen sites from a bookmark or app rather than an email link, and check the address before you sign in.
Want your whole business covered?Check your Cyber Essentials readiness
Password management

Get your whole team on Keeper

We set up and manage Keeper for businesses: one secure vault for every password, with multi-factor authentication and staff training.