Password Generator
Generate strong, random passwords with your choice of length and character types. Passwords are created on your device with a cryptographically secure generator.
Runs in your browser. Your data is not uploaded.How our tools work
4–128 characters. 16 or more is recommended.
Generated on your device with the browser’s secure random number generator (crypto.getRandomValues). Nothing is sent or stored.
How do I create a strong password?
Use a long, random password that you don’t reuse anywhere else. This generator creates one as soon as the page opens, 16 characters by default, using your browser’s cryptographically secure random number generator. Adjust the length and character types, copy it, and store it in a password manager.
- A strong password is created as soon as the page loads.
- Adjust the length and choose which character types to include. A new password is generated with every change.
- Select Generate for another password, then Copy to put it on your clipboard.
- Save it in a password manager rather than writing it down.
Key features
Cryptographically secure
Uses your browser’s crypto.getRandomValues(), not Math.random(), and avoids bias when picking characters.
Every chosen type included
The password always contains at least one of each character type you select, as many sites require.
4 to 128 characters
From short PIN-style codes to long secrets such as API tokens.
Avoid look-alikes
Optionally leave out characters such as I, l, 1, O, o and 0 that are easy to misread.
Strength estimate
See the entropy in bits and a plain-language strength rating.
Common uses
- Generate Wi-Fi passwords, API keys and temporary codes
What makes a password strong?
Length matters most. Each extra character multiplies the number of possible passwords, so a 16-character random password is vastly stronger than an 8-character one, even with the same character types.
Randomness matters too. Passwords based on words, names or dates are guessed quickly, even with substitutions like “P@ssw0rd”. Randomly generated passwords have no pattern to exploit.
Finally, use a different password for every account. Then a leak at one website can’t be used to break into your other accounts. A password manager makes this practical.
Understanding entropy
Entropy measures how unpredictable a password is, in bits. Each bit doubles the number of guesses an attacker needs. As a rough guide, under 45 bits is weak, 65 or more is strong for online accounts, and 90 or more resists even large-scale offline attacks.
Frequently Asked Questions
Is it safe to generate passwords on a website?
This generator runs entirely in your browser. Passwords are created on your device using the secure random generator built into your browser, and are never transmitted, stored or logged.
Why does the Password Strength Checker rate it differently?
The two use different methods. This generator knows the password is random, so it rates it by how many possibilities it was picked from. The Strength Checker can’t know how a password was made, so it looks for common passwords, words, keyboard patterns and dates instead. A long random password from here should rate well in both.
Should I include symbols?
Symbols increase strength, but some sites reject certain symbols. If a site refuses the password, turn off symbols and increase the length instead.
How is the strength calculated?
Strength is based on entropy: the length multiplied by log₂ of the number of possible characters. This assumes the password is random, which it is when generated here. For very short passwords the figure is slightly high, because one character of each chosen type is always included.
Sources
Last updated:
Related guides & tutorials
How Long Should a Password Be?
What the NIST standard says about password length, why length beats complexity, and how long your passwords and passphrases should be.
What Is a UUID? Versions, Uniqueness and When to Use One
What a UUID is, how to read its version and variant, UUID versions 1, 4 and 7, how unique random UUIDs are, and how they compare with database IDs.