Strong passwords, generated safely
Weak and reused passwords are behind most account takeovers. This generator uses your browser's cryptographic random number generator — the same kind used for encryption keys — so every password is unpredictable. Choose the length and which characters to include, and at least one of each chosen type is guaranteed.
Prefer something you can remember? Switch to Memorable passphrase for a string of random words such as Maple-Rocket-Quiet-Harbor-42. A live meter shows the strength in bits and roughly how long an attacker would need to guess it.
How to create a strong password
- 1
Choose password or passphrase
Random characters for maximum strength, words for memorability.
- 2
Set the length
16+ characters for passwords, 5–6 words for passphrases.
- 3
Pick character types
Uppercase, lowercase, numbers and symbols; optionally avoid look-alikes.
- 4
Copy it
Store it in your password manager straight away.
Key features
Cryptographically secure
Uses crypto.getRandomValues, never Math.random.
Passphrase mode
Random words with separators, capitals and a number.
Strength meter
Entropy in bits and estimated crack time.
Look-alike filter
Skip I, l, 1, O and 0 for passwords you'll type by hand.
Nothing leaves your device
No server ever sees the password.
Common uses
- New accounts: Unique passwords for every website.
- Wi-Fi networks: Long passphrases that guests can still type.
- Master passwords: Memorable passphrases for your password manager.
How strong is strong enough?
| Strength | Entropy | Example setting |
|---|---|---|
| Fair | 40–60 bits | 8–10 random characters |
| Strong | 60–80 bits | 12 characters, all types |
| Very strong | 80+ bits | 16 characters, or 7-word passphrase |
Tips and good to know
- Never reuse a password across sites — one breach would unlock all of them.
- Use a password manager to store generated passwords; then you only need to remember one strong passphrase.
- Need dozens at once for a team or test accounts? Use the Bulk Password Generator.