Strong Passwords: Examples, Passphrases and Free Generators
A strong password should be long, unique, and unpredictable. The easiest way to get there is to use a password manager with a random password, or a memorable passphrase made from unrelated random words. This guide shows which option to choose and links directly to the tools that create them in your browser.
Generate a random password Generate a passphrase
What Makes a Password Strong?
- Long - At least 12 characters, and longer for important accounts.
- Unique - Never reused across multiple services.
- Unpredictable - Not based on names, dates, quotes, keyboard patterns, or personal details.
- Stored safely - Saved in a password manager instead of a notes app, browser tab, email, or chat.
Option 1: Use a Random Password
A random password such as xS#9aPz!D3uF4m is hard to guess and well suited for accounts stored in a password manager.
Use our free Password Generator to create strong, random passwords locally in your browser.
Option 2: Use a Passphrase
A passphrase is a series of unrelated words. It can be easier to remember and type than random characters, especially for a master password, device login, or account you access manually.
river-candle-planet-hammer
If a website requires extra character types, add separators, capital letters, numbers, or symbols:
River-Candle-Planet-Hammer42!
Use the Passphrase Generator to create a random word-based password phrase.
Password vs Passphrase: Which Should You Use?
| Situation | Best option | Why |
|---|---|---|
| You use a password manager | Random password | It can be long and complex because you do not need to remember it. |
| You need to remember or type it | Passphrase | Several random words are easier to type and recall. |
| You protect a master password | Long passphrase | Length and memorability both matter. |
What to Avoid
- Personal information such as names, pets, birthdays, addresses, or company names.
- Simple substitutions such as
P@ssw0rd123. - Common patterns such as
qwerty,abc123, or repeated words. - Reusing passwords or passphrases for different sites.
Store Passwords Safely
Strong passwords only help if you can keep them unique. Use a password manager such as Bitwarden to store credentials and generate new ones.
Check If a Password Has Leaked
Even a strong password must be changed if it appears in a breach. Use our Leaked Password Checker before reusing or trusting an older password.
Strong Password FAQ
How long should a strong password be?
Use at least 12 characters for ordinary accounts. For important accounts, use a longer random password or a passphrase with 4 to 6 random words.
Is a passphrase safer than a password?
A random password is excellent when a password manager stores it. A passphrase is often better when you need something memorable. In both cases, length, randomness, and uniqueness matter most.
Should I change passwords regularly?
Change a password when it is weak, reused, shared, or exposed in a breach. Forced frequent changes can lead to weaker patterns if nothing is wrong with the current password.
What is the fastest way to make a strong password?
Use the Password Generator for stored logins or the Passphrase Generator for something memorable. Save the result in a password manager.
Final Tips
- Enable 2FA on important accounts.
- Use different passwords for every service.
- Replace any password that has been shared or leaked.
- Do not send passwords over email or chat.