Best Secure password generator

You should be aware of the following to keep your passwords safe from social engineering, brute force, or dictionary attacks, and to keep your online accounts protected:

• Use different passwords, security questions, and answers for each accounts.
• Use at least 16 characters in your password, including at least one number, one uppercase letter, one lowercase letter, and one special symbol.
• When possible, enable two-factor authentication.
• Do not use your passwords to store postcodes, house numbers, phone numbers, birthdates, ID card numbers, social security numbers, or other personal information.
• Don't use passwords that include the names of your family, friends, or pets.
• Don't log into sensitive accounts on other people's computers, or while using a public Wi-Fi hotspot, Tor, a free VPN, or a web proxy.
• Don't use stuff like your fingerprints as a password because they can be duplicated (but not changed).
• Do not save your passwords in your web browsers (Firefox, Chrome, Safari, Opera, Internet Explorer, Microsoft Edge), as any passwords saved in web browsers can be easily guessed.
• Do not use two or more passwords that are identical in most of their characters, such as ilovefreshflowersMac and ilovefreshflowersDropBox, because if one of these passwords is stolen, all of them are stolen.
• It is suggested that you update your passwords every five weeks.
• Encrypt and backup your passwords in multiple places so that if you lose access to your computer or account, you can easily recover your credentials.
• When you feel it's essential, check for hardware keyloggers (e.g. wireless keyboard sniffer), software keyloggers, and hidden webcams on your computer if there are important files on it that others can access.
• When you leave your computer or phone, be sure it is locked.
• Encrypt and backup your passwords to multiple locations so that you can easily recover them if you lose access to your computer or account.
• Except if you know these messages are not fraudulent, do not follow the link in an email or SMS message, and do not reset your passwords by clicking it.
• If you're a software developer, you should sign the update package with a private key and validate its signature with the public key you previously published.
• It's a good idea to save the MD5 or SHA1 checksums of all files on your computer (using software like MD5Summer), then check the integrity of your files (and identify trojan files or programmes with backdoors injected) every day by comparing their checksums with the result saved earlier.
• Encrypt the whole system partition; alternatively, deactivate the pagefile and hibernation functionalities, as the pagefile.sys and hiberfil.sys files may contain vital documents.
• Close your web browser when you leave your computer; otherwise, cookies can be easily intercepted with a simple USB device, allowing you to enter into your account using stolen cookies from other computers, bypassing two-step verification.
• Allow only whitelisted IP addresses to connect to or log into critical servers and workstations.