Password Generator
Generate strong, random passwords with your choice of length, numbers and symbols. Uses your browser's cryptographic random generator. Nothing is stored.
About the Password Generator
Create passwords that are genuinely hard to guess. Choose a length and the character types to include, and get one or many passwords generated with your browser's cryptographically secure random number generator, along with an estimate of their strength.
How to use it
- Choose a length (16 or more is recommended).
- Pick which character types to include.
- Copy a password and store it in a password manager.
How the passwords are generated
Characters are picked with crypto.getRandomValues, your browser's cryptographically secure random number generator, using rejection sampling so every character is equally likely. Each password is guaranteed to contain at least one character from every type you select, then shuffled so those characters aren't in predictable positions.
How strong is strong enough?
Strength is shown as bits of entropy: length × log2(size of the character set). A 16-character password using upper and lower case letters, digits and symbols has around 100 bits, far beyond what can be guessed. Length adds more strength than complexity, so a longer password is the easiest upgrade.
Good password habits
Use a different password for every account and keep them in a password manager so you only need to remember one. Turn on two-factor authentication for email, banking and social media. Generated passwords exist only on this page and are gone when you close it.
Frequently asked questions
Are generated passwords stored or sent anywhere?
No. They are generated on your device with crypto.getRandomValues and disappear when you leave the page.
How long should a password be?
At least 12 characters, ideally 16 or more. Length adds more strength than complexity.
What does ‘bits of entropy’ mean?
It measures how many guesses an attacker would need. Every extra bit doubles the work; 80 bits or more is very strong.