What is a password generator and why use it?
A password generator creates passwords from truly random characters instead of words and patterns that people choose. Human-made passwords tend to be short, reused and predictable, which is how most accounts get broken into.
This generator uses your browser's built-in cryptographic random number generator. The password is created on your device, is never sent anywhere and is never stored, so only you ever see it.
How to use this tool
Set the length
Drag the slider from 4 to 64 characters. Aim for at least 16 for important accounts.
Choose characters
Tick uppercase, lowercase, numbers and symbols. At least one type must stay selected.
Copy the password
A new password appears each time you change an option. Press Generate new for another one, then Copy password. Store it in a password manager.
How password strength is estimated
Strength is measured in bits of entropy: the length multiplied by log2 of the number of possible characters. Each extra bit doubles the number of guesses an attacker needs. Length matters more than complexity, since every added character multiplies the possibilities.
As a guide, below 40 bits is weak, 60 bits resists most online attacks, and 90 bits or more is very strong. A 16-character password using all four character types has about 100 bits.
entropy (bits) = length × log2(pool size)FAQ
Is this password generator safe to use?
Yes. Passwords are generated in your browser with the Web Crypto API (crypto.getRandomValues) and are never sent to a server or stored.
How long should my password be?
At least 12 characters for general accounts and 16 or more for email, banking and password manager master passwords.
Should I include symbols?
Symbols increase strength, but some sites reject certain ones. If a site refuses your password, turn off symbols and increase the length instead.
Can I reuse a generated password?
No. Use a different password for every account so one breach cannot unlock the others, and keep them in a password manager.
Why does each password include every type I picked?
The generator guarantees at least one character from each selected type, because many sites require it, then shuffles the result.