Password Generator – Create Strong Random Passwords
Create strong, random passwords in one click. Choose the length and character types, skip look-alike characters and see how strong each password is.
Set the length (16 or more is a good default), keep upper case, lower case, numbers and symbols switched on and copy the password. Each one is created on your device with the browser’s cryptographically secure random generator and is never sent anywhere.
How to use Password Generator
- Move the slider to choose the length — 16 characters or more is recommended.
- Choose which characters to include: A–Z, a–z, 0–9 and symbols.
- Tick “No look-alikes” if you will type the password by hand.
- Choose how many passwords you want, then click “Copy” next to the one you like.
- Save it in a password manager straight away.
What makes a password strong?
Strength comes from length and randomness, not from clever tricks. A password made by a person — a name, a date or a word with a few numbers — follows patterns that cracking tools try first. A password chosen at random from a large set of characters has no pattern at all. The strength meter shows the entropy in bits: the number of guesses an attacker would need, written as a power of two.
Entropy = length × log₂(number of possible characters)
How long should a password be?
| Length | Characters used | Entropy | Verdict |
|---|---|---|---|
| 8 | letters + digits (62) | 47 bits | Too short for important accounts |
| 12 | all four types (87) | 77 bits | Good |
| 16 | all four types (87) | 103 bits | Very strong |
| 20 | all four types (87) | 128 bits | Beyond any brute-force attack |
Current guidance from NIST favours long passwords over complicated rules and recommends checking new passwords against lists of leaked ones. Use at least 12 characters, and 16 or more for email, banking and password-manager accounts.
How this generator works
Each character is picked with crypto.getRandomValues, the secure random number generator built into every modern browser — the same source used for encryption keys. The tool avoids “modulo bias”, so every character is equally likely, and it makes sure at least one character of each type you chose is included. Nothing is stored or sent: the passwords exist only on your screen.
Good password habits
- Use a different password for every site. If one site leaks, the others stay safe.
- Store passwords in a password manager instead of a notebook or a text file.
- Turn on two-factor authentication (2FA) wherever it is offered.
- Change a password immediately if a service tells you it was part of a data breach.
Developers who need random identifiers rather than secrets can use the UUID Generator.
You may also find these free tools useful: JSON Formatter, Regex Tester and UUID Generator.
Frequently asked questions
Is this password generator safe?
Yes. Passwords are created in your browser with a cryptographically secure random generator and are never sent to a server or saved.
How long should my password be?
At least 12 characters, and 16 or more for important accounts like email and banking. Longer random passwords are much harder to crack.
Should I use symbols in passwords?
Symbols add strength, but length matters more. If a site does not accept some symbols, make the password a few characters longer instead.
What are look-alike characters?
Characters such as l, 1, I, O and 0 that are easy to confuse. Excluding them helps when you need to type a password by hand.
How do I remember a random password?
You don’t need to. Save it in a password manager, which fills it in for you, and only remember one strong master password.
Last updated: