Password Generator: Create a Strong Unique Password
password generator: Generate a unique password with enough length, store it in a password manager, and enable multi-factor authentication where possible.

A strong password is long, unique to one account, and difficult for someone else to guess. Reusing a memorable password across websites creates risk because a breach at one service can expose other accounts. A password manager can generate and store a different random password for each site. Use the service’s allowed characters and length, and turn on multi-factor authentication for important accounts. Never share a password through an insecure message.
Prefer length and uniqueness
Longer passwords create more possible combinations when they are randomly generated. A random password manager entry is easier to make unique than a short pattern based on personal facts. If a service requires a passphrase, combine unrelated words using the manager’s generator rather than a quote or predictable sequence. Avoid adding predictable substitutions such as replacing every a with @; attackers test common patterns.
Use a password manager carefully
Choose a reputable manager, protect its master account with a strong unique password, and enable multi-factor authentication. Save recovery codes in a secure location separate from your everyday device. Check that the generated password fits the site’s length and symbol rules before submitting. Do not store passwords in plain text files, source code, or shared notes. If a generated password was exposed, replace it rather than trying to keep using it.
Add defenses beyond the password
Multi-factor authentication helps when a password is stolen or reused elsewhere. Prefer phishing-resistant methods where supported, such as security keys or passkeys. Keep recovery email and phone details current, and review active sessions after suspicious activity. If a site supports passkeys, learn how it stores and syncs them before changing account recovery settings. Password strength cannot compensate for a compromised device or fraudulent sign-in page.
Worked example
Account: example.com
Generated password: unique random value from your password manager
Store: password manager entry for example.com
Add: MFA and recovery codesHow often should I change a strong password?
Change it when it is exposed, reused, or compromised, and follow your organization’s policy. Use unique passwords and MFA rather than arbitrary frequent changes.


