Strong password generator
Generate truly random passwords with your browser’s cryptographic generator, unbiased and without them ever leaving your device. Adjust length and character types and instantly see their entropy and how long an attacker would need to guess them.
Processed 100% in your browser
Ctrl + Enter runCtrl + C copy result
How to use
- 1Choose the length: 16 characters or more is recommended.
- 2Select the character types and, if you will dictate or type it by hand, avoid ambiguous ones.
- 3Copy the password or click “Generate another” (Ctrl/Cmd + Enter).
- 4If you need several, pick a quantity and download the list.
Use cases
- Create a different password for every account.
- Passwords for WiFi, routers and databases.
- Initial passwords for new employees or users.
- Generate batches of passwords for testing or deployments.
Frequently asked questions
Is it safe to generate passwords on a website?
Here it is: the password is created in your browser with crypto.getRandomValues and is never sent or stored on any server. You can even go offline and the tool keeps working.
How long should a strong password be?
With upper and lower case, numbers and symbols, 16 characters give over 100 bits of entropy — impossible to brute-force. For important accounts use 16–20 characters and a password manager.
What is entropy?
It measures in bits how unpredictable a password is. Each bit doubles the number of guesses required. Below 36 bits is weak; above 80 is considered very strong.
Why avoid ambiguous characters?
Characters like I, l and 1 or O and 0 are easily confused when read. Avoiding them makes typing the password by hand easier and barely reduces its security.
How is the time to crack calculated?
We assume an offline attack with powerful hardware (10 billion guesses per second) that has to try, on average, half of all possible combinations.