Password Generator
Create strong random passwords. Nothing is sent or saved.
-
Characters used
Created in your browser · never sent, saved or logged
Strength is an estimate of how random the password is, not a guarantee. Store passwords in a password manager and use a different one for every account.
- Stays in your browser
- No account needed
- Limits shown up front
Help and details
- Choose a length and the types of character you want.
- A new password is created every time you change a setting or press the refresh button.
- Press Copy password and paste it into your password manager or the sign-up form.
- Use a different password for every account.
- Random numbers come from the Web Crypto API built into your browser (crypto.getRandomValues), not from Math.random.
- Each character is chosen with rejection sampling so every character in the pool is equally likely.
- One character from every selected type is included first, then the rest is filled from the combined pool and shuffled.
- Strength is estimated as length × log2(number of possible characters) and shown in bits; it describes the randomness only.
- Length from 8 to 128 characters
- Lowercase, uppercase, numbers, and symbols (any combination)
- The strength figure is an estimate. It does not account for how or where you store the password, or for phishing and data breaches.
- Requiring one character of every selected type slightly reduces the number of possible passwords; the estimate is an upper figure.
- Some websites reject certain symbols or limit the length. Turn symbols off or shorten the length if a site refuses the password.
- This tool does not save passwords or keep a history. Copy it before you leave the page.
This tool runs in local-only mode. Your text or files are processed in your browser and are not uploaded to our servers for this feature. Keep originals on your device; downloads create a separate copy.
- Is the password sent anywhere?
- No. It is created in your browser and is never uploaded, stored, or included in analytics. The page does not keep a history, so close or refresh it and the password is gone.
- How long should a password be?
- For accounts you protect with a password manager, 16 to 24 random characters is a sensible default. Longer is fine where a site allows it. Length adds more strength than extra symbol types.
- Why avoid look-alike characters?
- Characters such as I, l, 1, O and 0 are easy to mix up when you read a password aloud or type it from print. Turning this option on removes them at a small cost in strength.
- Can you guarantee this password is secure?
- No tool can. We use the browser's secure random generator and explain how it works, but the safety of an account also depends on the website, your device, and how you store the password.
Related tools
- QR Code GeneratorMake QR codes for links, text, Wi-Fi, and email.
- Word CounterCount words, characters, and reading time in your browser.
- Case ConverterSwitch case and clean extra spaces instantly.