Password Generator
About this tool
Generate strong random passwords with the length and character types you need. The characters are picked with your browser's cryptographic random number generator, so the results cannot be predicted or reproduced.
Everything runs in your browser. The passwords are never sent to a server, stored, or logged.
How it works
- Randomness comes from
crypto.getRandomValues(). Each character is chosen without bias (values that would favor some characters are discarded), and the characters are shuffled at the end. - The strength figure is the estimated entropy, length × log2(pool size), in bits. It is an estimate for a truly random password: with "at least one of each type" turned on it is slightly lower than shown. As a guide, 60 bits resists casual attacks, and 80 bits or more is very strong for online accounts.
- Length matters more than variety. A 20-character password from letters and digits is stronger than an 8-character one with symbols.
- Some sites reject certain symbols. Edit the symbol list, or list characters under "Never use" (a quote or backslash can break scripts and config files).
- The length range is 4 to 128 and you can create up to 50 at once. If the length is shorter than the number of required types, it is raised automatically.
FAQ
Q. Is it safe to generate a password on a web page?
A. This page creates it locally and sends nothing. Even so, treat any online generator with care: for your most important accounts, a password manager's built-in generator avoids copying the password through the clipboard.
Q. Should I use the same password in several places?
A. No. Use a different password for each account and store them in a password manager, so one leak cannot unlock the others.