Password Generator

Create passwords that are genuinely random and long enough to resist guessing. Generated locally with your browser's cryptographic random number generator; nothing ever leaves your device.

🔒 Runs in your browser. Nothing is uploaded.

Strength:

    How to use

    1. Set the length. 16 characters is a solid default; use 20 or more for important accounts.
    2. Choose which character sets to include. Keep all four on unless a site forbids symbols.
    3. Turn on "Exclude look-alikes" if you will type the password by hand or read it aloud.
    4. Click "Generate", then copy a password with its button. Store it in a password manager.

    Examples

    New online account

    Generate a 20-character password with all character sets and save it in your password manager.

    Wi-Fi network key

    Use 16–24 characters with look-alikes excluded so guests can type it from a printed card.

    Temporary passwords for a team

    Generate 10 at once, hand one to each person, and require a change at first login.

    Frequently asked questions

    How random are these passwords?

    They use the Web Crypto API (crypto.getRandomValues), the same cryptographically secure generator browsers use for TLS. Characters are picked with rejection sampling so every character is equally likely.

    What does "bits of entropy" mean?

    It measures how many guesses an attacker would need: every extra bit doubles the effort. 60+ bits is fine for online accounts with rate limiting; 90+ bits resists offline cracking of leaked password hashes.

    Are the passwords stored or sent anywhere?

    No. They are generated in your browser and exist only on this page until you close or reload it. There is no server, no logging and no analytics on this tool.

    How long should a password be?

    At least 12 characters with mixed sets, 16 as a comfortable default, and 20+ for email, banking and password-manager master passwords.

    Why exclude look-alike characters?

    In many fonts 0 and O, or 1, l and I, look identical. Excluding them avoids mistakes when a password must be typed or read rather than pasted. It slightly reduces entropy, so add a couple of characters to compensate.

    Related tools