Password generator

Create strong, random passwords that are never transmitted or stored anywhere, because they are generated on your own device.

  • Free
  • Private
  • No sign-up
Stays on this device. Network requests since you started: 0 How to check this yourself

How your text and data are handled

  1. Your text and dataRead from your device
  2. Worked on in this tabBy code running in your browser
  3. Ready to copyNothing is stored

Never sent to a server. See how to check

How to use it

  1. Choose the length and character types.

  2. Select "Generate new" until you like one.

  3. Copy it straight into your password manager.

About this tool

Characters are chosen with crypto.getRandomValues, your browser's cryptographically secure random generator, using rejection sampling so every character is equally likely. Each chosen character type is guaranteed to appear at least once. Strength is shown as entropy, the number of guesses an attacker would need expressed in bits: 80 bits or more is very strong for online accounts.

Best practice: use a different password for every account, store them in a password manager, and turn on two-factor authentication where possible.

Good to know

  • Passwords are not saved; once you leave the page they are gone.
  • Some sites restrict which symbols are allowed. Untick Symbols if a site rejects the password.

Frequently asked questions

How long should a password be?

At least 16 characters with mixed types for important accounts. Length matters more than complexity.

Is it safe to generate passwords online?

Here, yes: the password is created in your browser and never sent over the network. You can check this with the network counter or by going offline first.

What does "avoid look-alikes" do?

It removes characters that are easy to confuse, such as l, 1, I, O and 0, which helps when you have to type a password by hand.

You might also need