Why use a password generator?
People are bad at inventing random passwords. We reuse favourite words, birthdays and simple patterns like Name@123, which attackers try first. A password generator removes the human pattern completely. This one uses your browser’s Web Crypto API, the same cryptographically secure random number source used for encryption, and unbiased sampling so every character is equally likely.
The passwords are created on your device. They are not sent over the internet, logged or saved, and they disappear when you close the page.
How to generate a strong password
- Set the length with the slider. Sixteen characters or more is a good default for important accounts.
- Choose which character types to include. Using all four gives the largest number of possible combinations.
- Keep “Exclude look-alikes” on if you may need to type the password by hand.
- Click Copy and paste the password into the sign-up form and your password manager.
- Need several, for example for a team or test accounts? Choose how many and download them as a text file.
Features
- Lengths from 6 to 64 characters.
- Guaranteed to include at least one character from every type you select.
- Live strength meter with entropy in bits and an estimated cracking time.
- Bulk generation of up to 20 passwords with copy and download options.
- Works offline once the page has loaded.
How strong is strong enough?
| Entropy | Rating | Example |
|---|---|---|
| Under 40 bits | Weak | 8 lowercase letters |
| 40–59 bits | Fair | 10 mixed letters and numbers |
| 60–79 bits | Strong | 12 characters, all types |
| 80+ bits | Very strong | 14+ characters, all types |
Strength matters, but so does uniqueness. Use a different password for every account and store them in a password manager. Our guide How to Create Strong Passwords You Can Actually Manage explains a simple system.
Frequently asked questions
Is it safe to generate passwords online?
It is safe with this tool because passwords are generated locally in your browser using secure randomness and are never transmitted or stored.
How long should my password be?
At least 12 characters for everyday accounts and 16 or more for email, banking and admin accounts.
Should I include symbols?
Yes, if the website allows them. Symbols increase the number of possible combinations. Length still matters more than complexity.
What does “exclude look-alikes” do?
It removes characters that are easy to confuse, such as capital I, lowercase l, the number 1, capital O and zero.
How do I remember random passwords?
You do not need to. Use a password manager to remember them, and protect it with one strong passphrase plus two-factor authentication.
Related tools
Share Wi-Fi passwords with a scan.
JSON FormatterFormat and validate JSON safely.
Word CounterCount words and characters.