Password Generator
Create strong random passwords instantly.
How to use Password Generator
Pick the length — 16 characters or more is recommended.
Choose which characters to include: uppercase, lowercase, numbers and symbols.
Click the regenerate arrow until you like the result.
Copy the password and store it in your password manager.
What makes a password strong (and what does not)
Password strength is measured in entropy: how many guesses it would take to find yours by trying every combination. Length matters far more than exotic symbols — every character you add multiplies the attacker's work, while swapping an 'a' for an '@' barely moves it, because cracking software tries those substitutions automatically. Sixteen random characters drawn from several character sets land around 100 bits of entropy, beyond any realistic brute-force attack.
The key word is random. Human-made passwords — dates, names, a word with numbers stapled on — fall to dictionary attacks no matter how long they are, because attackers do not try combinations, they try human patterns. A password generator exists for exactly this reason: to produce a string with no pattern to exploit. Here you pick a length from 8 to 64 characters, toggle uppercase, lowercase, numbers and symbols, and the strength meter shows you the entropy of what you configured.
Why generating a password here is safe
The right question to ask of any online generator is where the password is generated. Here it comes from your own browser's cryptographic random generator — the standard crypto.getRandomValues API — on your device: it is never sent, never logged, and does not exist anywhere until you copy it. It works exactly the same with your connection switched off, which is the simplest way to verify that claim.
The avoid look-alikes option removes the characters that get misread when copied by hand — 0/O and 1/l/I — and is worth switching on when the password will be written on paper or read aloud, like a WiFi key. For everything else leave it off: every excluded character shaves a little entropy from the result.
One password per service, and a manager to remember them
A perfect password reused everywhere is a broken password waiting for a date: when one service is breached — and breaches are routine — the first thing tried against your email is that same password on every other site. Generating a fresh one per account turns any breach into a one-account problem instead of an everything problem.
That is only livable with a password manager, which remembers them and types them where they belong. The workflow that works: generate here, paste into the signup form, save to the manager, forget. The only password left to memorise is the manager's master password — make it long, phrase-like and unique.
Frequently Asked Questions
Is it safe to generate a password here?
Yes. Passwords are generated with your browser's cryptographic random generator, entirely on your device. Nothing is sent, logged or stored anywhere.
How long should my password be?
At least 16 characters with several character sets (~100 bits of entropy). Longer is always stronger, and a password manager means you never have to remember it.
What does “avoid look-alikes” do?
It removes characters that are easy to confuse when typing by hand — 0/O and 1/l/I — handy for passwords you'll read from paper.
Is it safe to use an online password generator?
This one is, and you can verify why: the password is produced by your browser's cryptographic random generator, on your device, without being sent or stored anywhere. It even works with your internet connection turned off.
How long should my password be?
At least 16 characters mixing several character sets (~100 bits of entropy). Longer is always stronger, and with a password manager the length costs you nothing because you never type it.
Do symbols make a password stronger than letters?
They help, but far less than length does: adding four more characters beats any symbol. What really matters is that the password is random — no words, dates or keyboard patterns.
Can I generate a password that is easy to type by hand?
Turn on the avoid look-alikes option: it removes 0/O and 1/l/I, the characters that cause the most mistakes when copying from paper. That is the right setting for WiFi keys and passwords that get dictated.
Related tools
Looking for something else? Browse all generators.