Password Generator
Create strong, unique passwords — random characters or easy-to-type passphrases — generated in your browser with a cryptographically secure random source. Nothing is stored or transmitted.
No data needed
How to use
- Choose a random password or a passphrase.
- Set the length and character types.
- Copy the password into your password manager.
How it works
Characters are chosen with crypto.getRandomValues and rejection sampling, so every character is equally likely — no bias, no Math.random. At least one character from each selected type is included.
Strength is shown as entropy in bits: length × log₂(pool size). A 20-character password from 89 characters has about 129 bits, far beyond what can be brute-forced. A 5-word passphrase from our 1,269-word list has about 51 bits plus the number — use 6 words or more for important accounts.
Examples
- Strong default
- 20 characters, all types → ~129 bits.
- Passphrase
- Brook-Tiger-Salad-Pouch-Unit-42 — easy to type on a phone.
- Wi-Fi password to share
- A passphrase of 5 or 6 words is easy to read aloud and type on a TV or console keyboard, unlike a random string.
Common uses
- Creating new account passwords
- Wi-Fi and router passwords
- Generating API secrets
Privacy & security
This tool does not take any personal data or files. Results are generated on your device. How each tool handles files
Frequently asked questions
Is it safe to generate passwords online?
This page generates them locally in your browser and never sends them anywhere. You can verify this by disconnecting from the internet — it still works.
How long should a password be?
At least 14–16 random characters for online accounts; use a password manager so you don't need to remember them.
Should I change my passwords regularly?
No — forced rotation pushes people towards small, predictable changes. Both NIST (SP 800-63B) and the UK NCSC now advise changing a password only when you have reason to think it was exposed. A long, unique password per account matters far more.
A site rejects my password. Why?
Some sites cap the length or ban certain symbols. Lower the length or turn off symbols and generate again. A 16-character letters-and-digits password is still far stronger than a short one with punctuation.
Last updated: