Password Generator
Create strong, random passwords – generated in your browser and never sent anywhere.
Create strong random passwords in one click. Choose the length and which character types to include, see an entropy-based strength rating, and copy the result. Five fresh passwords are shown at a time.
What makes a password strong?
Length and randomness matter most. A random password of 16 or more characters drawn from letters, numbers and symbols has so many possible combinations that guessing or brute-forcing it is unrealistic. Predictable patterns, names and dictionary words make passwords far easier to crack.
This generator uses crypto.getRandomValues, the browser's cryptographically secure random number generator, with rejection sampling so every character is equally likely. The strength shown is the entropy in bits: length times log2 of the number of possible characters.
How to use it
- Set the length with the slider (16 characters or more is recommended).
- Choose which character types to include; turn on “Avoid look-alike characters” if you need to read or type the password by hand.
- Press Copy and paste it into your password manager or the sign-up form. Use a different password for every account.
Frequently asked questions
- Is it safe to generate passwords here?
- Yes. The password is generated on your device and never leaves the page. There is no server, no log and no storage.
- How long should my password be?
- At least 12 characters for ordinary accounts and 16 or more for important ones such as email, banking and your password manager. Longer is better because it is easy for the computer to remember but hard to guess.
- What does 'bits of entropy' mean?
- It is a measure of how many guesses an attacker would need: every extra bit doubles it. Around 80 bits or more is considered very strong for online accounts.