For picky websites
A strong password
that fits the rules.
Your bank caps passwords at 12 characters? Only a few symbols allowed? Copy the site’s rules below and get a random password it will accept on the first try.
Keep only the symbols the website lists as allowed.
Read the site’s rules, then go to the maximum
Websites usually list their requirements next to the password field, or reveal them in an error message. Set the length to the maximum the site accepts, not the minimum, keep only the allowed symbols, and switch on the constraints it enforces. Every extra character multiplies the work of an attacker far more than any composition rule.
If a site insists on 8 characters, the account depends on the site itself limiting login attempts. Turn on two-factor authentication where it is offered, and never reuse that password elsewhere. For every other site, the standard generator or a passphrase is the better choice.
Custom-rules generator FAQ
Why do some websites reject strong passwords?
Older systems often cap the length (8, 12 or 16 characters), allow only a few symbols, or require the first character to be a letter. This generator lets you copy those rules so the password is accepted on the first try.
Do these rules make the password weaker?
A little. Fewer allowed characters or a shorter maximum length reduce the number of possibilities, and the entropy shown under the password reflects that. Always use the longest length the site accepts.
Is every valid password equally likely?
Yes. The generator draws every character uniformly with crypto.getRandomValues() and redraws the whole password when a rule fails, so no position or character class is favoured.
Is the password sent anywhere?
No. It is created in your browser and stays in this page’s memory until you leave it. Copy it into the website, then save it in your password manager.
More free security tools
Password generator
Random passwords, passphrases or PINs, created by the Web Crypto API on your device.
Open toolPassphrase generator
Random words you can actually remember, with the entropy of a 16-character password.
Open toolWi-Fi password + QR code
A strong WPA2/WPA3 key and a QR code your guests scan to join, with a card to print.
Open toolStrength test
See your password the way an attacker does: patterns, entropy and four crack-time scenarios.
Open toolBreach checker
Find out if a password already leaked, without ever revealing it (k-anonymity).
Open toolSuspicious link checker
Inspect a URL and its actual hostname locally, without opening the destination.
Open toolPassword policy builder
NIST, PCI DSS and CIS presets with ready-to-run Windows, Active Directory and Linux scripts.
Open toolCrack-time table
How long every length and character mix survives a modern GPU cracking rig.
Open toolPassword audit
Import your password manager export and find reused, weak and breached passwords, all on your device.
Open toolPhishing quiz
Twelve realistic messages. Can you tell the scams from the real thing? Share it with your team.
Open toolSmall-business security checklist
Score your company's account security in five minutes and print a prioritised action plan.
Open toolTwo-factor authentication guide
Which 2FA method to choose and how to turn it on for Google, Microsoft, Apple and more.
Open tool