Password Generator

Generate strong, random passwords

Most breaches of personal accounts come from weak or reused passwords. This generator creates a random password from the character types you choose, entirely inside your browser. The password is never sent over the internet or stored by this site.

How to use it

1. Set the length with the slider. Sixteen characters is a sensible minimum for important accounts.
2. Tick the character types to include: uppercase, lowercase, numbers and symbols.
3. Turn on Avoid look-alikes if you may need to read the password aloud or type it from paper, since it drops confusing characters such as I, l, 1, O and 0.
4. Press generate for a new password, then copy it straight into your password manager or the sign-up form.

How strength is measured

The strength bar is based on entropy, measured in bits. Entropy is the length multiplied by log₂ of the size of the character pool. A 16-character password drawn from about 94 printable characters has roughly 105 bits, and a 12-character one from letters and digits (62 characters) has about 71 bits. Each extra bit doubles the number of guesses an attacker needs, so length helps more than clever substitutions.

Randomness comes from your browser’s cryptographic random number generator, the same source used for encryption, and not from an ordinary pseudo-random function.

Good password habits

• Use a different password for every account. One leaked password should never unlock a second site.
• Use a password manager. It remembers long random passwords so you do not have to.
• Turn on two-factor authentication for email, banking and social accounts.
• Prefer length over complexity. A long random password beats a short one full of symbols.
• Never share a password by email or chat, and be wary of any site that asks for it.
• Change a password immediately if you learn a service you use has been breached.

Frequently asked questions

Is it safe to generate a password on a website?

This one runs locally in your browser and makes no network request when creating a password. As a rule, only use generators from sites you trust, and avoid ones that send the result to a server.

How long should my password be?

At least 12 characters for ordinary accounts and 16 or more for email, banking and password-manager master passwords.

Why include symbols at all?

They enlarge the character pool, which raises entropy. Some sites do not accept every symbol, so untick that box if a site rejects your password.