20 characters

Choose 8–63 characters.

Your password for apple.com

Very Strong20 characters

Website requirements

Defaults for apple.com. Select or unselect options to customize your password.

Allowed characters
Rules to enforce

Source rules for apple.com

Applies to this domain and its subdomains; a more specific listed domain takes priority.

Source rules

minlength: 8; maxlength: 63; required: lower; required: upper; required: digit; allowed: ascii-printable;

Based on Apple’s Password Manager Resources (MIT), updated 2026-10-25. A website’s requirements may have changed since this snapshot. No password or website selection is sent to Apple or the selected website.

More tools

Choose the tool that fits what you need.

Check known breaches

Run a check when you choose. Only a hash prefix is sent; your password stays on your device.

Further reading

Practical security guides from the blog

Use the generator, then go deeper on password strength, passkeys, secure sharing, and account hygiene.

View all posts
Security Basics7 min read

What Makes a Password Secure in 2026?

Modern guidance on length, managers, passphrases, MFA, usernames, and when to change a password.

Read article
Password Engineering6 min read

Where Password Randomness Comes From

How browser randomness, entropy, rejection sampling, and extra user input fit into generation.

Read article
Data Breaches5 min read

How to Check If Your Password Has Been Leaked

What breach checks can tell you, what they cannot, and what to change after exposure.

Read article
Password Management3 min read

Password Reuse: Why One Repeat Can Compromise Everything

Why a single reused password can cascade across email, banking, cloud, and work accounts.

Read article
Secure Sharing5 min read

Should You Send This by Email, Chat, a Secure Note, or a Password Manager?

Choose the right channel for passwords, recovery codes, Wi-Fi secrets, and temporary handoffs.

Read article

Frequently asked questions

How is this different from a regular password generator?

Choose a website and the generator starts with its recorded length limits, allowed characters, and required character types. You can then adjust the length or customize the rules.

Will every generated password be accepted by the website?

The default settings follow the recorded rules, but websites can change their requirements. If a website rejects a password, compare its current requirements with the settings here. Custom settings may also produce a password outside the recorded rules.

Where do the website requirements come from?

The rules come from a bundled snapshot of Apple’s Password Manager Resources. Open “Source rules” above to see the rule for the selected website and the snapshot date.

Why does the available password length change between websites?

Each website can have different minimum and maximum lengths. The slider follows the selected rules, with support for up to 128 characters. The generator starts at 20 characters when the website allows it.

Can I change the character types and other requirements?

Yes. Use the options under “Website requirements” to customize the password. A warning appears if the generated password falls outside the website’s recorded rules. “Reset to website defaults” restores the original settings.

Is my password sent to the website or a breach-checking service?

Password generation happens in your browser. Your password and website selection are not sent to Apple or the selected website. Breach checking is off by default. If you enable it, only the first five characters of a password hash are sent to Have I Been Pwned; the password itself is never sent. A missing match does not guarantee safety.

Photo by Marc Marchal on Unsplash · Modified with AI