A password generator that uses your browser's cryptographic random source, not a predictable shuffle. Choose a length and character set, or switch to a memorable passphrase, and see an honest entropy-based strength estimate rather than a decorative colour bar. Generated passwords are never transmitted or logged.
No signupRuns in your browserNothing uploaded
Password GeneratorLive
This tool is built for a wider screen — scroll sideways inside the frame, or turn your device.
How to use it
Four steps to a result
Choose a length
Longer beats clever. Sixteen characters is a sensible floor for an account that matters; the strength meter shows what each extra character buys you.
Pick your character sets
Toggle uppercase, lowercase, digits and symbols. You can exclude look-alike characters like l, 1, O and 0 if you will ever type the password by hand.
Or switch to a passphrase
Several random words are far easier to remember and to type on a phone than a symbol soup, and reach the same strength given enough words.
Copy it into your password manager
Copy the result and save it immediately. A generated password is only useful if it is stored somewhere you will find it again.
Questions
Frequently asked questions
They are generated with crypto.getRandomValues(), the browser's cryptographically secure random number generator. That is the same source used for session tokens and key material, and it is not the predictable Math.random() that many generators still use.
No. Generation happens entirely in your browser — there is no server, no logging and no analytics on the generated value. You can disconnect from the network entirely and the generator still works.
Sixteen random characters is a reasonable minimum for anything that matters, and twenty or more for email and password-manager master passwords, since those unlock everything else. Length raises the cost of a brute-force attack far faster than adding exotic symbols does.
Yes, if you use enough words. A five- or six-word passphrase drawn from a large word list has comparable entropy to a strong random string, and it is dramatically easier to remember and to type. The strength meter shows the entropy for whichever mode you pick.
It reports entropy in bits, which measures how many guesses an attacker would need on average. Each additional bit doubles that work. This is a more honest measure than the weak/medium/strong labels that only count whether you added a capital letter.
Keep going
More free tools
Every one runs in your browser, with no account and nothing uploaded.