🔐

Password Generator

Generate a strong, secure random password. Click the password to regenerate.

🔒 Generated entirely in your browser with a secure random generator — nothing is sent or stored. Free, no sign-up.

Click generate to start

About the Password Generator

Password strength depends on two things: length and randomness. A 16-character password using uppercase, lowercase, numbers and symbols has over 3.5 × 10²⁹ possible combinations — even the fastest modern computers would take millions of years to crack using brute force.

This generator uses window.crypto.getRandomValues() — a cryptographically secure random number generator built into every modern browser. Nothing is sent to any server. The password exists only in your browser and is never logged or stored anywhere.

The NIST (National Institute of Standards and Technology) recommends passwords of at least 15 characters and discourages periodic forced changes, which lead to predictable patterns (Password1 → Password2). Instead, use a unique, random password for every account and store them in a password manager.

For other security-conscious tools: the Decision Maker uses cryptographic randomness for coin flips, and the Random Name Picker is equally unbiased for choosing between options.

How to use the Password Generator

1
Pick a mode — Password for random characters, or Passphrase for memorable words
2
Set the length (or number of words) — 16+ characters is recommended
3
Choose your options — character types and exclude look-alikes, or separator, capitalisation and a number
4
Check the strength — the meter shows entropy in bits and an estimated crack time
5
Tap Generate for a fresh result any time
6
Copy to clipboard — it never leaves your browser

Frequently Asked Questions

Yes — passwords are generated using window.crypto.getRandomValues(). Nothing is logged or stored.
At least 12 characters. 16+ with symbols is considered very strong.
Use a password manager (Bitwarden, 1Password or your browser's built-in). Only remember one master password.
Yes — symbols dramatically increase the number of possible combinations.
Yes — strongly recommended. Password managers (Bitwarden, 1Password, or your browser's built-in manager) generate, store and autofill unique passwords for every site. They protect against phishing by only filling credentials on the correct domain. Using one eliminates password reuse — the leading cause of account takeovers.
A 16-character password using all character types has approximately 10³⁰ possible combinations. At 1 trillion guesses per second (the speed of dedicated cracking hardware), it would take longer than the age of the universe to crack. Length is the single most important factor in password strength.
Common patterns that create weak passwords: dictionary words (even with substitutions like E→3), keyboard walks (qwerty, 12345), personal information (birthdays, pet names), and repeated patterns. The most common password globally is still "123456" — crackable in under a second by any modern system.
A password is a short string of random characters (like k7$Rm2!xQ). A passphrase is several random words joined together (like Tiger-Maple-River-7) — usually longer, far easier to type and remember, and just as strong when you use enough words.
It removes characters that are easily confused — the letters l, I and O and the digits 1 and 0 — so the password is easier to read aloud, copy by hand or type without mistakes.

More handy tools

Name PickerPick a winnerWord CounterCount wordsCase ConverterChange caseCalculatorQuick maths