🔐 Password Generator

Generate strong, random passwords instantly.

Generate Multiple

Generate strong, random passwords instantly. Choose your desired length and character types — uppercase, lowercase, numbers and symbols. All passwords are generated locally in your browser and never sent to any server.

How to generate a strong password

Drag the length slider to your target — 16 characters is a good default, 20+ for high-value accounts. Toggle the four character classes (uppercase, lowercase, numbers, symbols) to match the rules of the site you're signing up to. Click Generate, copy with the copy button, paste into the website. The strength meter scores entropy in bits: greens are excellent, yellows acceptable, red weak. Use Generate 5 passwords to compare alternatives, then pick whichever is most pronounceable for emergency manual typing.

How password entropy actually works

A password's strength comes from how many possible combinations an attacker has to try. With 26 lowercase letters and 12 characters, that's 2612 ≈ 9.5 × 1016 guesses. Add uppercase, digits and symbols (95 printable ASCII) and 12 characters becomes 9512 ≈ 5.4 × 1023 — billions of times harder. Modern GPUs can guess ~100 billion hashes per second, so for offline attacks aim for 80+ bits of entropy. The generator uses crypto.getRandomValues, which is cryptographically secure, not the weaker Math.random().

Frequently Asked Questions

How long should a password be?
At least 12 characters for most accounts. 16+ characters is recommended for important accounts like email and banking. Longer is always stronger.
What makes a password strong?
Length, randomness and a mix of character types. Avoid real words, dates, names or patterns. A truly random 16-character password is virtually uncrackable.
Are these passwords stored anywhere?
No — everything is generated in your browser. Nothing is sent to any server.
Should I use a password manager?
Yes — it's the safest way to use unique, strong passwords for every account without needing to remember them.
Why exclude similar characters?
Some characters look near-identical depending on the font: 0/O, 1/l/I. If you'll need to read or type the password manually, excluding them prevents transcription errors. The cost is a small entropy reduction, easily offset by adding one more character.
Are passphrases better than passwords?
A long passphrase of 4–6 random words can match a 16-character symbol soup for entropy and is much easier to type. They're great for master passwords. Per-site passwords from a manager don't need to be memorable so character-class generators win there.

Tips for staying secure

Use a different password for every account — reuse is the single biggest source of breaches. Enable two-factor authentication wherever possible. Don't paste passwords into shady-looking sites; check the URL first. And if a service emails you your own password in plain text after sign-up, treat that as a warning that they're storing it badly and reuse with caution elsewhere.