This password generator creates random passwords that are hard to guess and hard to crack. Choose the length and which character types to include, and a new password appears instantly. Passwords are made with crypto.getRandomValues, your browser’s cryptographically secure random number generator, and are never sent over the internet.
How to use it
- Set the length with the slider. 16 characters is a good default.
- Choose the character types the website allows.
- Click “Generate new” until you get one you like, then copy it into your password manager.
What makes a password strong
Length matters most. Each extra character multiplies the number of possible passwords. A 16-character password using upper and lower case letters, numbers and symbols has about 104 bits of entropy, far beyond what any computer can try by brute force. A short password made from a real word, a name or a date can be guessed in seconds because attackers start with lists of common choices.
Good password habits
- Use a different password for every account, so one leak does not unlock everything.
- Store them in a password manager rather than a notebook or spreadsheet.
- Turn on two-factor authentication wherever it is offered.
Frequently asked questions
Is it safe to generate a password on a website?
On this page the password is created by your own browser and never leaves your device. You can even disconnect from the internet after the page loads and it still works.
What does the strength meter measure?
It estimates entropy in bits from the length and the size of the character set. Above 80 bits is very strong for everyday accounts.