Password Generator
Create strong random passwords right in your browser.
Your password
Generating…
Strength: Very strong (about 103 bits)
Made in your browser. Passwords are never sent or saved.
Runs in your browser. Nothing you enter is uploaded.
How to use the Password Generator
- Set the length with the slider. Sixteen characters or more is a good choice.
- Choose which types of characters to include.
- Press Generate new if you want a different password.
- Copy the password straight into your password manager or account form.
About the Password Generator
Strong, unique passwords are the best protection for your accounts, but they are hard to invent yourself. This password generator creates random passwords of the length and character types you choose. It uses your browser's secure random number generator, runs on your device, and never sends or stores what it makes.
Every character is chosen with crypto.getRandomValues, the browser's cryptographically secure source of randomness, not the Math.random function that is unsuitable for security. When a number is needed from a smaller range, values that would make some characters slightly more likely are discarded and redrawn, so each character has exactly the same chance.
The generator picks one character from each type you selected, fills the rest from all types together, and then shuffles the result with a secure shuffle, so the password always contains every type but in an unpredictable position. The strength meter estimates entropy as length × log2(size of the character pool). Under 40 bits is weak, 60 bits is fair, 80 bits is strong and above that is very strong. Avoiding look-alike characters removes I, l, 1, O, 0 and o.
Frequently asked questions
Is it safe to generate passwords in a browser?
Yes, when the code runs on your device and uses a secure random source, as this tool does. Nothing is sent to a server or saved.
How long should a password be?
Use at least 12 characters, and 16 or more for important accounts such as email and banking.
Should I include symbols?
Symbols make a password harder to guess, but length matters more. Some sites do not accept every symbol, so untick the option if a site rejects it.
Can I reuse a generated password?
No. Use a different password for each account and keep them in a password manager so you do not need to remember them.
What does the strength meter show?
It estimates how many guesses an attacker would need, based on the length and the number of possible characters. It cannot know whether a site stores your password safely.