Password Generator
Generate a strong random password instantly. Adjust the length and character types to match whatever the site or app requires. Everything runs in your browser and nothing is ever sent to a server.
How to Use This Password Generator
Drag the length slider to set how many characters you want. Tick or untick the checkboxes to choose which character types to include. Then click Generate Password and your new password appears at the top of the box.
Hit Copy to copy it straight to your clipboard. You can generate as many passwords as you like. Each click produces a completely new result because the generator uses the Web Crypto API, which produces cryptographically secure random values rather than a basic random number formula.
Use the longest password the site will accept. If a site limits you to 20 characters, use 20. If it allows 64, use 64. Longer is always better when it comes to password security.
What Makes a Password Strong?
Password strength is measured by entropy: the number of possible combinations an attacker would need to try to guess your password. Entropy increases in two ways. First by adding more characters. Second by expanding the character set.
An 8-character password using only lowercase letters has around 208 billion possible combinations. An 8-character password using uppercase, lowercase, numbers, and symbols has about 6.7 quadrillion combinations. A 16-character password using all character types has so many combinations that even a supercomputer would take longer than the age of the universe to guess it.
Avoid dictionary words, names, dates, and keyboard patterns like qwerty or 12345 even if they are long. Attackers use lists of common passwords and dictionary attacks before resorting to brute force. Random character generators sidestep this problem entirely.
Password Strength Examples
- Weak: "password123", a dictionary word with numbers. This is cracked in under a second by modern tools.
- Fair: "BlueSky2024!", a passphrase with substitutions. Better but still vulnerable to targeted attacks if the attacker knows personal details.
- Strong: "Xk7#mQ2@vLr9nP4w", 16 characters, all character types, no patterns. Extremely difficult to crack.
- Very Strong: A 32-character random string from this generator. Effectively uncrackable with current and foreseeable computing power.
Frequently Asked Questions
How secure is this password generator?
The generator uses the Web Crypto API built into every modern browser. This produces cryptographically secure random values, the same standard used by security professionals and operating systems. Your password is generated entirely on your device and is never transmitted to any server.
How long should a password be?
At least 12 to 16 characters for most accounts. For anything sensitive like email or banking, 20 characters or more is a better target. Each additional character multiplies the number of possible combinations, making brute-force attacks exponentially harder. A 16-character random password would take a modern computer billions of years to guess.
Should I use special characters in passwords?
When the site allows it, yes. Adding symbols to your character set significantly increases entropy. A password using only lowercase letters has 26 possible values per character. Adding uppercase, numbers, and symbols raises that to about 95 values per character. The difference in security is massive, especially at longer lengths.
Where should I store the generated passwords?
A password manager is the safest and most practical solution. Bitwarden is free and open source. 1Password and Dashlane are strong paid options. These apps encrypt your passwords and sync them across devices. Avoid storing passwords in plain text files or browser-only storage if you use shared computers.
Is it safe to generate passwords in a browser?
Yes, for properly built generators like this one. The Web Crypto API generates values the same way your operating system generates secure random numbers. Nothing is logged, cached, or sent anywhere. You can inspect this page's source code and network requests to verify that no data leaves your device.
Guides for the Password Generator
Longer reads on the maths and the practical side of this tool.