🔒 Privacy: everything runs in your browser. Nothing is uploaded.
About this password generator
A strong password is long and truly random. Humans are bad at randomness: we reuse words, birthdays and predictable substitutions like P@ssw0rd, which cracking tools try first. This password generator uses the browser’s cryptographically secure random number generator (crypto.getRandomValues), the same source used by password managers, and it never sends anything over the network.
You can pick the length, which character sets to include and whether to exclude characters that look alike (I, l, 1, O, 0) for passwords you need to read aloud or type from paper. The tool also shows an entropy estimate in bits. As a rule of thumb, 80 bits or more is very strong for online accounts; a 16-character password using all four sets is around 100 bits.
Once generated, store the password in a reputable password manager rather than a note or spreadsheet, and turn on two-factor authentication wherever it is offered, ideally with an authenticator app or hardware key instead of SMS. For Wi-Fi networks, a 20-character password without ambiguous characters is a good compromise between strength and the occasional need to type it on a TV or printer. If a site imposes a maximum length or bans certain symbols, adjust the options and generate again rather than editing the password by hand, since manual edits tend to reduce randomness. Change any password that appears in a known data breach.
How to use it
- Set the length (16–24 is a good default) and how many passwords you want.
- Choose character sets. Some sites reject certain symbols; untick Symbols if so.
- Click Generate and copy one into your password manager.
FAQ
Are these passwords stored?
No. They are generated in your browser memory and disappear when you close the tab.
How long should a password be?
At least 12 characters for everyday accounts and 16+ for email, banking and password-manager master passwords.
Is it better than a passphrase?
Both work. Random passphrases of 5–6 words are easier to remember; random character passwords are shorter for the same strength.
Should I reuse a strong password?
No. Use a unique password per site so one breach does not unlock everything.