Password Generator
Build a password that is genuinely hard to guess. Choose the length and character mix, and the generator does the rest using your browser's cryptographic randomness.
Anything from 16 characters up is comfortably out of reach.
How to pick a password worth using
Length beats cleverness. A 20-character password drawn from a mixed pool has far more entropy than a short one with a symbol bolted on the end, and it is no harder to store in a password manager.
The strength meter here reports real entropy: the size of the character pool raised to the length of the password, expressed in bits. Under 56 bits is worth improving; 78 bits and up is comfortable for accounts that matter.
Every password is produced locally with crypto.getRandomValues and rejection sampling, so no character is more likely than another. Nothing is sent anywhere, and nothing is stored after you leave the page.
Are these passwords safe to use?
Yes. They are generated on your device with the Web Crypto API and never transmitted. Refresh the page and the password is gone for good, so save it in a password manager before you navigate away.
What does “exclude look-alikes” do?
It removes characters that are easy to confuse when read aloud or typed from a screenshot: capital I, lowercase l, the digit 1, O and 0 among them.
How long should my password be?
Sixteen characters is a sensible floor for everyday accounts. For a password manager master key or anything protecting money or identity, use 24 or more.