Password Generator

Create strong, random passwords

Weak and reused passwords are the main way accounts get hacked. This password generator creates truly random passwords using your browser’s cryptographic random number generator (crypto.getRandomValues), the same source used for security keys. Each password is made on your device and is never saved or sent over the internet.

How to generate a secure password

1. Choose a length with the slider. 16 characters or more is recommended.
2. Select which characters to include: uppercase, lowercase, numbers and symbols.
3. Tick Exclude look-alikes if you will type the password by hand, so 0/O and 1/l/I are not mixed up.
4. Click Copy. Click ↻ for a new password, or Generate 10 for a batch.

What makes a password strong?

• Length – each extra character multiplies the number of possible combinations.
• Randomness – no words, names, dates or keyboard patterns like “qwerty”.
• Variety – a mix of character types makes each position harder to guess.
• Uniqueness – a different password for every account.

The strength meter shows the password’s entropy in bits. Above 80 bits is very strong for everyday accounts.

Keep your passwords safe

Use a password manager to store unique passwords for every site, and turn on two-factor authentication wherever it is available. Never share passwords by email or chat. If you need to share Wi-Fi access, create a scannable code with the Wi-Fi QR code generator instead.

How long would it take to crack?

Estimates assume a fast offline attack on a randomly generated password. Human-chosen passwords are far weaker because attackers try common words and patterns first.

Why this generator is secure

• Uses crypto.getRandomValues(), a cryptographically secure random source built into your browser.
• Avoids modulo bias, so every character is equally likely.
• Guarantees at least one character from each set you select.
• Runs entirely offline: passwords are never sent, logged or stored.

Password best practices

1. Use a unique password for every account. Reuse is how one breach becomes many.
2. Store passwords in a password manager such as Bitwarden, 1Password or your browser’s built-in manager.
3. Turn on two-factor authentication (2FA) for email, banking and social accounts.
4. Change a password straight away if a service reports a breach.

Passphrases

If you must remember a password, a passphrase of four or more random words (“copper-lantern-river-mango”) is both strong and memorable. For everything stored in a password manager, use the random passwords generated here. To share a Wi-Fi password safely, create a WiFi QR code.

Frequently asked questions