Password generator
Create random passwords with the length and characters you choose. They are generated with cryptographic randomness, right in your browser.
100% in your browser — nothing is sent to any serverYour password
—
Passwords are generated with crypto.getRandomValues, your browser's own random generator. Nothing is stored or sent anywhere: copy yours and save it in a password manager.
What makes a password strong
A password's strength comes mostly from its entropy: how many possible combinations exist. It is measured in bits and equals length × log₂(alphabet size). Each extra bit doubles the search space.
That is why a long passphrase of random words (correct-horse-battery-staple, ~164 bits) can be stronger than a short complex one (Tr0ub4dour&3, ~79 bits). The meter here uses the actual entropy of what you generate.
Using it well
- Use a length of 16 or more for important accounts; 20-24 is ideal.
- Reuse passwords as little as possible: a password manager creates and remembers a unique one for each service.
- Turn on two-factor authentication whenever it is available.
Frequently asked questions
Is it safe to generate passwords here?
Yes. Passwords are generated with crypto.getRandomValues, your browser's own cryptographic random generator, which is the standard for this kind of data.
Are the passwords stored anywhere?
No. The password is generated, shown on screen, and never stored or sent to any server. Closing or reloading the page deletes it.
What length is recommended?
16 characters or more for important accounts. 20 to 24 is ideal. More than adding symbols, what really protects is the length: each extra character multiplies the combinations.
What makes a password strong?
Mostly entropy, that is, how many possible combinations exist. A long passphrase of random words can be stronger than a short one full of symbols.