Password Generator

Generate a Strong Password

Choose Password for a random string or Passphrase for a set of words. Set the length and how many you need. Password mode includes at least one character from each group you select.

The generator uses your browser’s secure random source. Changing a setting replaces the results. Select Generate again for a fresh set or use Back and Next to browse the results.

Select Copy to copy the result on screen. Paste it straight into the account’s password field or your password manager. Clear the entry from your clipboard history if your device keeps one.

Password Length: 8, 10, 12, 14 or 16 Characters

Start with 16 random characters when the account accepts them. Use 8, 10, 12 or 14 only if you need to fit a shorter limit. A longer random password gives someone more combinations to guess.

The Australian Signals Directorate’s password guidance recommends at least 15 characters. The ATO’s cyber security tips for businesses recommend passphrases with four or more random words and multi-factor authentication where possible.

The estimate measures the number of possible results in bits. Each extra bit doubles that number. With all four character groups selected, 12 characters give about 77 bits. At 16 characters the estimate rises to about 103 bits.

The estimate describes results from this generator. It does not tell you how long a password would take to crack or whether it has been exposed. Use a different password for each account.

Memorable Passphrases

Choose a passphrase when a staff member must remember a password or type it where autofill is unavailable. The generator chooses each word independently and separates the words with spaces. Keep the six-word default if the account accepts it.

ASD’s passphrase guidance recommends four or more random words and at least 15 characters. Use the words as generated. A familiar quote or a sentence you make up is easier to guess.

The word source is the Electronic Frontier Foundation’s long passphrase list (CC BY 4.0), reformatted without the dice codes.

Password Manager Generators

If your practice already uses a password manager, generate the password there when it can fill and save the new login for you. To keep a password from this page, save it in the account’s entry in the manager.

• When you’re signed in to Chrome, Google Password Manager suggests a password in the sign-up field and saves the accepted suggestion to your Google Account.
• Bitwarden lets you pick a random password or passphrase in its apps and generate one from a saved login entry.
• LastPass lets you choose the password length and character types. Its built-in generator can fill and save the login.
• Norton Password Manager lets you adjust length and character types in its web app, which also has a passphrase mode.
• Proton Pass can suggest either a password or a passphrase in its browser extension and save the new login when you confirm.

For ATO Online services for agents, staff use their own Digital ID and need the practice’s authorisation in Relationship Authorisation Manager. Keep individual sign-ins private.

Wi-Fi and Shared Device Passwords

Generate a separate password for the staff Wi-Fi. Start with 20 random characters if your router and devices accept that length. For a device that limits symbols, turn off Symbols and keep the password as long as the device allows.

Keep the Wi-Fi password separate from the router’s administrator password. Use a separate guest network for visitors. Share the staff Wi-Fi password through a restricted vault in your practice’s password manager.

Give staff individual logins on shared computers where possible. If a shared device needs a common access password, keep it in the restricted vault. Change it when someone who knows it leaves or no longer needs access.