cv.cm
All lessons

Developer tools

How to generate a strong password

A unique password for one account. You will set length and character types in this tab, copy once, and paste into the signup. Random bytes come from this device. Do not reuse it.

5-minute read

Today's result A random password you pasted into one account, that never left this tab except via copy, and that you will not email.

Open password when you are creating or resetting one account. Default length 16. Exclude similar drops 0 O I l 1. Nothing is uploaded.

Open Password generator
Contents
  1. Use a unique password for this account

    Reusing a password is how one leak opens the rest. A password manager can store it. Do not recycle a phrase you already typed on another site.

    Length 16+. Letters, digits, symbols. Exclude 0 O I l 1 if you will type it.
    Length 16+. Letters, digits, symbols. Exclude 0 O I l 1 if you will type it.
  2. Open password on cv.cm

    Generation stays in this tab. Random bytes come from Web Crypto on this device.

    Open Password generator
  3. Set length 16 or more

    Default is 16. Longer is stronger if the site allows it. Below 12 is for the sites that still cap length, not a goal.

  4. Keep letters, digits, and symbols unless the site forbids them

    Exclude similar drops 0, O, I, l, and 1 so you can read it. If a bank form rejects symbols, turn symbols off for that account only.

  5. Copy once and paste into the account

    Do not screenshot it. Do not put it in email or chat. A password manager is the place to store it after paste.

    Copy once. Paste into one account. Do not email it. Close the tab.
    Copy once. Paste into one account. Do not email it. Close the tab.
  6. Close the tab

    Closing discards the password from this page. If you did not store it, generate a new one — do not try to remember a random string.

FAQ

Can I generate a strong password free online?

Yes. cv.cm uses Web Crypto in this tab. Nothing is uploaded.

How long should a password be?

16 or more if the site allows it. Default here is 16. Below 12 is only for sites that still cap length.

What does exclude similar do?

It drops 0, O, I, l, and 1 so the string is easier to read if you must type it.

Is the password uploaded?

No. Closing the tab discards it.

Should I email the password to myself?

No. Paste into the account, store it in a password manager, close the tab.