Password Generator

Include

Press Generate to create a password.

About this tool

A good password should be hard to guess and long enough to resist simple attacks. Short passwords, names, birthdays, and reused passwords are trouble waiting for a bad day. This tool helps you avoid that without thinking too much about it.

How to use it

  1. Set the length. For most accounts, 16 characters is a solid starting point.
  2. Tick the character types you want. If a site rejects symbols, untick them and add a few extra characters of length instead.
  3. Click Generate. The password is shown above, along with a strength estimate.
  4. Don’t like it? Generate another. Then click Copy and paste it straight into a password manager.

Common uses

  • New account sign-ups
  • Wi-Fi and router passwords
  • Shared team logins
  • Test data and sample accounts
  • Replacing a password that appeared in a breach

Tip: Store real passwords in a password manager, not in a note app or a chat thread. A manager lets every account have its own long random password, so one leak never opens a second door.

Privacy note

Generated passwords stay in your browser. We don’t need to see them, and we don’t want to. The tool uses your browser’s cryptographically secure random number generator and makes no network requests while generating.

Frequently asked questions

How long should my password be?

Length does more work than complexity. Sixteen characters from a mixed set is strong for most accounts. Use 20 or more for your email, bank, and password manager, because those protect everything else.

How is the strength estimate calculated?

It shows entropy in bits: the password length multiplied by log₂ of the number of possible characters. Every extra bit doubles the number of guesses an attacker needs. Around 80 bits is strong against offline cracking; 110 and above is excellent. It is an estimate for random passwords, so it does not apply to ones you make up yourself.

Is it safe to generate passwords in a web page?

Yes, when the page does it locally. This generator uses crypto.getRandomValues, the same source browsers use for encryption keys, and rejects biased values so every character is equally likely. Nothing is sent anywhere. You can check the Network tab in your browser’s developer tools.

Why skip look-alike characters?

Characters such as I, l, 1, O, and 0 are easy to confuse when you have to read a password aloud or type it from paper. Skipping them makes a password slightly easier to copy by eye at a tiny cost in strength.