Password Generator
Create strong, random passwords and passphrases instantly.
Password options
Generate several
Passwords are generated locally in your browser with the Web Crypto API (crypto.getRandomValues).
Nothing is sent to a server, stored or logged.
How to create a strong password
Length matters most. Each extra character multiplies the number of possible passwords, so a 16-character password using upper and lower case letters, digits and symbols has about 103 bits of entropy – far beyond what any attacker can brute-force. For accounts that matter, use at least 14–16 characters and a different password for every site, ideally stored in a password manager.
Passwords vs. passphrases
A passphrase is several random words such as lemon-river-brave-paper-cloud. It is easier to
type and remember. This generator picks words from a built-in list of 2,048 common English words, so each
word adds exactly 11 bits: five words give 55 bits, seven words give 77 bits. Use six or more words for
important accounts.
What does the strength meter show?
Entropy is calculated from how the password was generated (character pool size and length, or word count), not from how it looks. The "include every type" option removes a tiny fraction of possibilities, which is accounted for. Every character is chosen with unbiased rejection sampling, so no symbol is more likely than another.