Developer tools
Password Generator
Generate a strong random password in your browser: choose the length and character sets, see its strength, copy it with one click.
What it is for
A strong password is long, random and used in one place only. This generator builds passwords from your browser's cryptographic random number generator, so every character is chosen independently and nothing about the result is predictable. Pick a length, choose which character sets to draw from, and generate until you have one you like. The line under the password shows its entropy in bits, which is the honest measure of strength: every extra bit doubles the number of guesses an attacker would need. Nothing you generate here is sent anywhere or kept; the page has no server side.
Questions
- Is it safe to generate a password on a website?
- On this page, yes. The passwords are made by the Web Crypto API inside your browser and never leave it: there is no request to a server, no storage and no analytics on the result. You can confirm that by generating with the network disconnected.
- What does the bits number mean?
- Entropy, measured in bits, counts how many equally likely passwords the generator could have produced; each extra bit doubles that number. A 16-character password from letters, digits and symbols has about 105 bits, which is far beyond what any attacker can try even with the password hash in hand.
- Should I add symbols?
- Symbols add about half a bit per character, so length matters more than variety: four extra lowercase letters beat adding symbols to a short password. Use symbols when a site demands them, and otherwise make the password longer.
- Why exclude look-alike characters?
- Characters such as 0 and O, or 1, l and I, are easy to misread when a password is written down or read out. Excluding them costs very little strength and saves a lot of frustration on a phone keyboard or a TV remote.