Password Generator
Create a random password or passphrase in your browser. Nothing is sent or stored.
The password is generated in your browser and is never sent or stored.
How to use it
Choose Password or Passphrase. A result is generated immediately and changes when you adjust settings, and the Regenerate button makes a new one.
- Password: length from 8 to 64 characters, lowercase and uppercase letters, digits and symbols. The option to avoid look-alike characters removes I, l, 1, O, 0, o and |.
- Passphrase: 3 to 10 random English words with a separator of your choice. It is easier to remember and to type on a phone.
- Strength is shown as entropy in bits plus a plain-language label.
Choosing a strong password
What matters most is length and true randomness. Use a different password for every account and keep them in a password manager.
As a rule of thumb, below 40 bits is weak, 60 bits or more is reasonably good and 80 bits or more is very hard to guess. A six-word passphrase has 48 bits, while a 16-character password using all character types has about 104 bits.
The estimate assumes an attacker knows how the password was generated. It is no substitute for two-factor authentication.
If a site demands certain character types, leave them ticked: every selected type is used at least once. Untick any characters a site does not allow.
Privacy
Randomness comes from the browser's cryptographic generator (crypto.getRandomValues). The password is created on your device, is never sent anywhere or stored, and disappears when you close or reload the page. Copy it and save it in a password manager straight away rather than on paper or in a message.