Password Generator
Generate strong random passwords right in your browser. Choose the length and character types, then copy the result. Everything happens locally on your device — the password is never sent anywhere.
Select at least one character type
Strength: Very strong (103 bits of entropy)
Generated Locally, Never Sent
Passwords are generated on your device using your browser's cryptographically secure random number generator (crypto.getRandomValues). Nothing is transmitted over the network, nothing is stored, and we cannot see the passwords you create.
Password Advice
Use a unique password for every site. When one service is breached, attackers immediately try the leaked passwords on email providers, banks, and social networks — a reused password turns one breach into many.
Use a password manager. Nobody can remember dozens of long random passwords, and writing them down or reusing them defeats the point. A password manager stores them encrypted, fills them in for you, and only asks you to remember one strong master passphrase.
Prefer length over cleverness. Substituting letters with symbols (p@ssw0rd) adds far less strength than simply making the password longer. Where a site allows it, turn on two-factor authentication as well.
Frequently Asked Questions
- Is it safe to generate a password on a website?
- This generator runs entirely in your browser using your device's cryptographically secure random number generator (crypto.getRandomValues). The password is never sent over the network, never stored, and we cannot see it.
- How long should my password be?
- At least 16 characters is a good default for important accounts. Length matters more than complexity — a longer password with more character types has more entropy and takes exponentially longer to crack.
- What does the strength estimate mean?
- The estimate is based on entropy: the number of possible characters raised to the password's length, expressed in bits. Roughly, under 40 bits is weak, 40-59 is fair, 60-79 is strong, and 80 or more is very strong.
- What does 'exclude ambiguous characters' do?
- It removes characters that are easy to confuse when reading or typing a password by hand: the digit 0 and letter O, and the digit 1 with lowercase l and uppercase I.
- Should I use the same password on multiple sites?
- No. Use a unique password for every site so that a breach at one service cannot unlock your other accounts, and store them in a password manager rather than trying to remember them.