About the Password Generator
Create a strong, random password that is almost impossible to guess. Choose the length and which characters to include, and the generator uses your browser's cryptographically secure random number generator. Passwords are never sent to our server.
How to use the Password Generator
- Choose a password length (16 or more is recommended).
- Tick the character types to include: uppercase, lowercase, numbers and symbols.
- Click Generate, then Copy to use your new password.
Features
- Length from 4 to 128 characters
- Uppercase, lowercase, numbers and symbols
- Option to exclude look-alike characters (l, 1, I, O, 0)
- Strength meter based on real entropy
- Uses crypto.getRandomValues - secure and unbiased
What makes a password strong?
Length matters most. Every extra character multiplies the number of possible combinations. A 16 character password using upper and lowercase letters, numbers and symbols has more than 100 bits of entropy, which would take billions of years to brute-force with current hardware.
Password safety tips
Use a different password for every account, store them in a password manager, and turn on two-factor authentication wherever it is offered. Never reuse a password that has appeared in a data breach.
Frequently asked questions
Is this password generator safe?
Yes. Passwords are generated in your browser using the Web Crypto API. Nothing is sent to our server, logged or stored.
How long should my password be?
At least 12 characters, and 16 or more for important accounts like email and banking.
What does "exclude similar characters" do?
It removes characters that look alike, such as l, 1, I, O and 0, so the password is easier to read and type by hand.
What is password entropy?
Entropy measures how unpredictable a password is, in bits. Each extra bit doubles the guesses an attacker needs. 80+ bits is strong and 100+ bits is excellent.