Password Generator
Create a strong, random password in one click. Adjust the length and character sets, then copy it — nothing is ever sent anywhere.
Select at least one character set to generate a password.
How to create a strong password
A strong password is long, random and unique to each account. Length matters more than complexity: a 16-character random password is dramatically harder to crack than an 8-character one, even with symbols added. This generator uses your browser's cryptographically secure random number generator (crypto.getRandomValues) — the same standard used by password managers and operating systems — rather than a predictable pseudo-random function.
What the strength meter measures
The meter estimates entropy in bits, calculated as length × log2(character pool size). Below 45 bits is considered weak, 45–80 bits is good for most accounts, and above 80 bits is excellent — effectively immune to brute-force attacks with current computing power.
Tips for using generated passwords safely
- Use a different password for every account — a password manager makes this practical.
- Avoid excluding character sets unless a site specifically forbids symbols; more variety means more entropy per character.
- 16+ characters is a solid default; go to 20+ for email, banking or admin accounts.
- This page never stores or transmits what you generate — copy it somewhere safe (ideally a password manager) before navigating away.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are generated entirely in your browser using the Web Crypto API, the same cryptographically secure random source used by password managers. Nothing is transmitted to a server, logged, or stored.
How long should my password be?
For most accounts, 16 characters mixing uppercase, lowercase, numbers and symbols is strong enough to resist modern cracking attempts. For highly sensitive accounts, use 20+ characters.
Does this tool store or remember my generated passwords?
No. Nothing is saved to localStorage, cookies, or sent anywhere. Once you leave or refresh the page, generated passwords are gone unless you copied them.
What makes a password "strong"?
Strength depends on entropy — length and the size of the character pool. A random 16-character password using all four character sets has roughly 105 bits of entropy, far beyond what brute-force attacks can realistically break.
Should I reuse the same password on multiple sites?
No. Use a unique password per account, ideally stored in a password manager, so a breach on one site can't be used to access your other accounts.