Free tool

Secure Password Generator

Create a strong, random password for cPanel, email, WordPress or FTP in one click. It’s generated in your browser — the password never reaches our servers.

Your new password
 
Strength: —

    Passwords are made on your device using your browser’s cryptographic random number generator. Nothing is sent, logged or stored — it even works offline once the page has loaded.

    Length beats complexity

    Every extra character multiplies the guesses needed. 16+ random characters is strong; 20 or more is better for anything important like cPanel or email.

    One password per account

    Reused passwords are how one leaked website turns into a hijacked mailbox. Use a different password everywhere and keep them in a password manager.

    Add two-factor too

    A strong password plus 2FA stops almost all account takeovers. Turn it on for your EDZNET account, cPanel and WordPress.

    Guides

    Frequently asked questions

    Is it safe to generate a password on a website?
    Here, yes: the password is created by JavaScript in your own browser using crypto.getRandomValues, the same secure random source password managers use. It’s never sent to our servers — you can disconnect from the internet after the page loads and it still works.
    What does “hosting-safe symbols only” mean?
    Some characters — quotes, backslashes, spaces, < > and | — can break older email apps, FTP clients, database config files such as wp-config.php, or shell scripts. Leaving this on uses only symbols that work everywhere on cPanel hosting, without making the password meaningfully weaker.
    How long should my password be?
    At least 16 characters for everyday accounts and 20+ for cPanel, email and anything with admin access. If you’re pasting it from a password manager, length costs you nothing — go long.
    What do the strength figures mean?
    Strength is measured in bits of entropy — how many guesses a computer would need on average. Each extra bit doubles it. Around 80 bits is strong, and 100+ is far beyond what anyone can brute-force. It only applies to randomly generated passwords like these, not ones you’ve made up.
    I’ve changed my email password — why can’t my phone connect?
    Every device with the old password saved keeps retrying it, and repeated failed logins can get your IP blocked by our firewall. Update the password on all your devices straight away. If you’re locked out, get your IP from What’s my IP and send it to support. See why IP blocks happen.
    How do I send a password to someone else?
    Not by email or chat — it stays there forever. Use our one-time secret link: it’s encrypted in your browser and self-destructs after one view.
    Should I write my password down?
    Use a password manager (Bitwarden, 1Password, your browser’s built-in one) rather than notes or spreadsheets. Never send passwords to support by email or ticket — we’ll never ask you for one.

    More free tools

    Hosting with security built in

    UK hosting protected by BitNinja, with 2FA on your account and real people to help when you’re locked out.