Password Generator

Generate strong passwords locally with a cryptographically secure random generator. Nothing is stored or sent.

✓ Runs locally in your browser — nothing is uploaded

In short: A password generator creates random passwords or passphrases using a cryptographically secure random source; length matters most — 16+ random characters or 5+ random words is strong.

About Password Generator

The best password is long, random and unique to each account. Humans are bad at inventing randomness, so a generator does it better. This one uses crypto.getRandomValues, the browser’s cryptographically secure random source, and picks characters without the subtle bias that naive Math.random()-based generators introduce.

You can choose the length and which character sets to include, exclude easily confused characters, and see an estimate of the password’s entropy in bits. If you need something you can type or remember, switch to a passphrase of random words. Generated passwords exist only on this page; nothing is saved or transmitted.

How to use Password Generator

  1. Set the length with the slider — 16 or more characters is a good default.
  2. Choose the character sets the site allows.
  3. Press Generate new until you get one you like, then copy it.
  4. Store it in a password manager rather than reusing it elsewhere.

Examples

A 20-character password

With all four sets enabled, a 20-character password has about 130 bits of entropy — far beyond what can be brute-forced.

A passphrase

Five random words such as maple-orbit-canvas-humble-tiger are easy to type on a phone and still strong.

Frequently asked questions

Is it safe to generate a password on a website?

This page generates passwords locally in your browser and has no server-side component. You can disconnect from the internet after loading it and it still works.

How long should my password be?

At least 12 characters for ordinary accounts and 16+ for email, banking and password-manager master passwords.

What does entropy mean?

Entropy measures unpredictability in bits. Each extra bit doubles the number of guesses an attacker needs. Above about 80 bits is considered very strong for online accounts.

Why avoid look-alike characters?

Characters like l, 1, I, O and 0 are easy to mistype when you read a password aloud or copy it by hand.

Updated November 2026 · Free, no signup · How we build and test tools

Related tools All developer tools →