Random Password Generator

Random password generators use a mathematical function to fill an array with random values, then convert those values into a string of characters, including upper and lower case letters, numbers, and symbols.

ExpressVPN’s password generator also lets you select the length of your password and which types of characters are required, and uses a separate function to quickly estimate your new password’s strength.

If you’re interested in how this password generator works at a deeper level, feel free to download it to your device and inspect the code directly.

A random password generator is safe to use as long as it:

• Uses a cryptographically secure method of generating random passwords

• Allows you to generate passwords that are long and complex enough to be effective

• Generates passwords privately on your device and does not send them across the internet

The ExpressVPN password generator at the top of this page fulfills these requirements, so it’s safe to use.

A password’s strength is defined by how difficult it would be for an attacker to crack or guess. Therefore the strongest passwords are long, random, and unique.

Long passwords are stronger than short passwords because, as length increases, it takes exponentially longer for a modern computer to try every possible combination of characters, a technique called brute-forcing. An 8-character password, for instance, would only take about three hours to crack by brute-force. Adding just four characters increases that time to three years.

Random passwords are difficult to guess. A password like “jack and jill went up the hill” may be long, but it is also a known phrase that attackers are likely to try as part of a dictionary attack, and if compromised, would give attackers a clue as to what your other passwords might be. Random passwords are unlikely to appear in any attacker’s dictionary, and give no such clues.

Finally, unique passwords won’t appear in any database of stolen passwords, which password crackers often use as a starting point in their attacks. Unique passwords also protect your other accounts in case one is ever compromised.

Therefore, if your password is long, random, and unique, you can safely call it a strong password.

If strong passwords are long, random, and unique, then weak passwords are short, non-random, or reused. If any of your accounts uses a short, non-random, or reused password, you should change it as soon as possible.

Yes, using a random password generator like the one on this page is an excellent way to increase your online security. We recommend using it any time you create a new online account or change a password for an existing one.