Password Generator

Create strong, random passwords with a cryptographically secure generator.

How to use the password generator

Move the slider to choose a length, tick the character types the website accepts, and press Generate. Press Copy to put the password on your clipboard, then paste it into the sign-up form and save it in your password manager. If you have to type the password by hand on another device, switch on “Avoid look-alikes” to remove characters that are easy to confuse.

How the passwords are created

Each character is picked independently and uniformly from the selected character pool using your browser’s secure random number generator, with rejection sampling so that no character is more likely than another. At least one character from every selected type is guaranteed, and the final order is shuffled with the same secure source.

What the strength estimate means

Strength is shown as bits of entropy: length × log2(pool size). A 16-character password using all four character types draws from about 90 characters, giving roughly 104 bits, far beyond what can be brute-forced today. The estimate only holds for randomly generated passwords; a human-chosen password of the same length is much weaker.

Frequently asked questions

Is this password generator safe to use?

Yes. Passwords are created on your device with the browser’s cryptographically secure random generator (crypto.getRandomValues). Nothing is sent to a server, stored or logged.

How long should a password be?

Use at least 12 characters for ordinary accounts and 16 or more for email, banking and password-manager master passwords. Length adds more strength than swapping letters for symbols.

What does the entropy figure mean?

Entropy, measured in bits, is the number of guesses an attacker would need expressed as a power of two. Each extra bit doubles the work. Around 80 bits or more is considered strong for a randomly generated password.

Should I reuse a strong password on several sites?

No. If one site is breached, attackers try the same email and password elsewhere. Use a unique password per account and keep them in a password manager.

Related tools