Password Generator
Password generator

Strong passwords, made on your device.

Make a random password or a passphrase of real words, sized to what the site allows. Each one is created by your browser's secure random generator and never leaves this page.

  • Created with your browser's cryptographic random generator.
  • Nothing is stored, logged or sent anywhere.
  • Shows strength in bits and the time to crack it.
·

    How it works

    A good password is long, random and used for one site only. This tool takes care of the first two.

    1. Pick a type

      A password packs the most strength into few characters. A passphrase is a few random words that are easier to type and remember.

    2. Set the size

      Choose the length and characters the site allows. The meter shows the strength in bits and how long a fast attack would need.

    3. Copy and save it

      Copy the result into the site and into your password manager. A new one is made every time you change a setting.

    Why use this one

    Small, fast and private: one page that does one job well.

    Truly random

    Characters are picked with crypto.getRandomValues and rejection sampling, so every character is equally likely.

    Passphrases

    Random words from a list of over 1,500 common English words, with your choice of separator, capitals and a number.

    Every character type

    Each type you tick appears at least once, which keeps sites with strict rules happy.

    Avoid look-alikes

    Leave out I, l, 1, O, 0 and o when you need to read a password aloud or type it from paper.

    Bulk generate

    Make 5, 10 or 20 at once and copy them all in one click.

    Private by design

    The site is static files with no analytics. Nothing you generate is stored or sent.

    Frequently asked questions

    Is it safe to generate a password on a website?

    Here, yes: the password is created by your own browser with its built-in cryptographic random generator, and the page never sends it anywhere. The site has no server code, no database and no analytics. You can even disconnect from the internet after the page loads and it keeps working.

    How long should my password be?

    For a random password with all character types, 16 characters or more is strong for almost any site. For a passphrase, use at least 5 or 6 words. The meter turns green at 64 bits and above.

    Password or passphrase: which is better?

    Both are strong when random and long enough. A passphrase is easier to type on a phone or TV and easier to remember, so it's a good choice for a password manager's master password or your computer login.

    What does "bits" mean?

    Bits measure how many guesses an attacker would need. Every extra bit doubles the work. The time shown assumes a fast offline attack of 10 billion guesses a second on a leaked password hash.

    Should I reuse a strong password?

    No. If one site leaks it, attackers try it everywhere else. Use a different password for every account and keep them in a password manager.

    Where does the word list come from?

    It is a list of over 1,500 common, easy-to-spell English words built for this tool. The strength shown is calculated from the real list size.

    More free tools

    Each one runs in your browser with no sign-up and no tracking.