Password generator
Generate a strong random password with full control over length and character sets. Cryptographically secure and fully client-side.
Password
Options
Editable. These symbols are used when “Symbols” is enabled.
Charset: 80 characters
A free random password generator
This tool creates strong random passwords entirely in your browser. You choose the length and which character types to include — lowercase, uppercase, digits and symbols — and the generator draws each character from a cryptographically secure random source. Nothing is sent anywhere, and an honest entropy readout shows exactly how strong the result is.
When should you use a random password?
Use a long random password for any account you do not need to memorize — almost every website login. Generate it here, store it in a password manager, and let the manager fill it in. Because you never type these by hand, they can be as long and random as the site allows.
For the few secrets you do have to remember, such as the master password that unlocks your manager, a word-based passphrase is usually the better choice.
Password length and character sets
Length is the single biggest factor in password strength. Each additional character multiplies the number of possibilities, so a 20-character password is dramatically stronger than a 10-character one even with the same character set. Aim for at least 16 characters for important accounts, and longer where the site permits.
Including more character types — uppercase, digits, symbols — raises the entropy per character, but length matters more. If a site rejects certain symbols, widen the length instead. You can also exclude visually ambiguous characters (like I, l, 1, O, 0) to make a password easier to read without meaningfully weakening it.
Passwords vs passphrases
Random character passwords pack the most entropy into the fewest characters, which is ideal when a machine stores and types them for you. Passphrases trade a little density for memorability, which is ideal when a human has to recall the secret. Use random passwords for stored logins and passphrases for the handful you must remember.
How to store strong passwords safely
A strong password only helps if you store it safely. Use a reputable password manager so each account gets its own unique random password and you only memorize one passphrase. Never reuse passwords across sites, and turn on two-factor authentication where it is offered. Avoid keeping passwords in plain text files, browsers’ unencrypted notes, or messages to yourself.
Frequently asked questions
How long should a strong password be?
At least 16 characters for important accounts, and longer where the site allows. Length increases strength faster than adding exotic symbols to a short password.
Are these passwords generated on a server?
No. Every password is generated locally in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
Should I include symbols?
Symbols raise entropy per character and many sites require them, so include them when you can. If a site rejects certain symbols, increase the length to compensate.
What does “exclude ambiguous characters” do?
It removes glyphs that are easily confused, such as I, l, 1, O and 0, so the password is easier to read and type correctly. The slight reduction in the character set is negligible for a long password.
Should I use a password or a passphrase?
Use a long random password for logins your password manager stores and fills, and a memorable passphrase for the few secrets you must type yourself, like your manager’s master password.
How should I store the passwords I generate?
In a reputable password manager, one unique password per account, protected by a single strong passphrase and two-factor authentication. Avoid plain-text files and reuse.