Stax Pass Start free trial

Free tool

Free password generator

Make a strong random password or a memorable passphrase right here. It is generated in your browser and never sent anywhere. Copy it, then save it in a password manager so you do not have to remember it.

Your new password

Turn on JavaScript to generate a password.

Strength

Type

Runs in your browser with the browser’s cryptographic random source. Nothing is stored or sent. Reload the page and it is gone, so copy it first.

How to use a generated password

A random password is only useful if you never have to remember it. Save it in a password manager the moment you create it, together with the website and username. The manager fills it in when you sign in, and you move on.

  1. Generate a password above and press Copy.
  2. Paste it into the site’s new-password field and into your password manager.
  3. Check that the site accepted it. Some sites cap the length or reject certain symbols; lower the length or turn symbols off and try again.
  4. Turn on two-factor authentication on the same account if the site offers it.

Stax Pass does these steps for you: when you save a login, the app suggests a strong password and keeps it encrypted on your device before anything syncs. Read what a password manager does if that is new to you.

What makes a password strong

Strength comes from two things: how many different characters could be in each position, and how many positions there are. A 12-character password made from letters, numbers and symbols has far more possibilities than a 12-letter word with a number on the end, because a word is one guess, not twelve.

  • Random beats clever. “Summer2026!” follows a pattern attackers try first. Twenty random characters do not.
  • Length matters most. Each extra character multiplies the possibilities. Going from 12 to 20 characters is a bigger win than adding one more symbol.
  • Unique per site. The best password in the world protects nothing if the same one unlocks your email, bank and shopping accounts. Reused passwords are how one breach spreads.

Password or passphrase?

Use random characters for accounts your manager fills for you. Use a passphrase, five or more random words, for the few passwords you have to type from memory: the one that unlocks Stax Pass, and the login for your computer. Words are easy for people to type and remember, and five random words from a long list are still very hard to guess.

The strength shown above is the number of bits of entropy for the options you picked. Around 60 bits is strong for a website login. Aim for 80 or more for the password that unlocks your vault, because everything else sits behind it.

Where the password goes next

A generator makes the first step easy. The hard part is keeping hundreds of unique passwords safe and ready on every device. That is the job of a password manager. Stax Pass stores each login encrypted on your device, syncs the protected copy to your other devices, and lets a family share chosen logins without sharing everything. The security guide explains exactly what is protected and what is not.

Common questions

Is it safe to use an online password generator?

This one runs only in your browser. It uses the browser’s own cryptographic random number source, and the password never leaves your device: there is no form, no request, and no logging. You can turn Wi‑Fi off and it still works.

How long should a password be?

For anything that matters, 16 characters or more with letters, numbers and symbols. For the one password that unlocks your password manager, use a passphrase of 5 or more random words, because you will type it often and it has to be strong.

Password or passphrase: which is better?

A random character password is best for accounts your password manager fills for you, because you never type it. A passphrase of random words is best for the few passwords you must remember and type, such as the one that unlocks Stax Pass.

What do the strength bits mean?

Bits of entropy measure how many guesses an attacker would need on average. Every extra bit doubles the work. Around 60 bits is strong for an ordinary website login; 80 bits or more is very strong and good for a vault password.

Should I write the generated password down?

Save it in a password manager instead, so it is encrypted and fills automatically. If you must write one down, keep it for the password manager itself, store the paper somewhere safe at home, and never photograph it.

Does Stax Pass have a password generator built in?

Yes. When you save a new login in Stax Pass, the app offers a strong generated password and keeps it with the website and username, encrypted on your device before it syncs. This page is for the times you need one outside the app.