Skip to content
AllToolsDesk

Popular

  • JSON Formatter & ValidatorFormat, minify and validate JSON with error locations.
  • CSS FormatterBeautify CSS, SCSS and Less with Prettier.
  • CSS MinifierCompress CSS and see the bytes saved.
  • JavaScript FormatterBeautify JavaScript and TypeScript.
  • JavaScript MinifierMinify JavaScript with Terser.
  • HTML FormatterIndent HTML, including inline CSS and JS.
  • JPG to PDFTurn images into a PDF, one per page.
  • Merge PDFCombine several PDFs into one file.
38 free toolsSee all tools
AllToolsDesk
Search tools
Browse all tools

Password Generator

Create strong random passwords up to 128 characters with your browser’s secure generator. Choose the characters, avoid look-alikes and see the strength.

Runs in your browser. Nothing is uploaded.

Loading tool…

About the Password Generator

Weak and reused passwords are behind most account takeovers. The strongest practical defence is a long, random, unique password for each account, kept in a password manager.

This generator uses your browser's cryptographically secure random number generator and avoids the subtle biases that make some generators less random than they look. You choose the length and character types to fit a site's rules, and the strength meter estimates how long an offline attack would take. Passwords are created on your device and never sent or stored anywhere.

How to use the Password Generator

  1. 1

    Set the length. 16 characters or more is a good default for accounts; use your password manager’s limit if it has one.

  2. 2

    Choose which characters to use. Turn on “Avoid look-alikes” if the password will be read or typed by hand.

  3. 3

    Copy a password. Press Generate for a fresh set; each one is created on your device.

Examples

1Default settings
Before
16 characters, all four sets
After
Very strong · 103 bits
2Easy to read aloud
Before
12 characters, all four sets, avoiding look-alikes
After
Strong · 76 bits
3Short PIN-style password
Before
8 characters, lower case and digits
After
Fair · 41 bits

Good to know

  • Strength is calculated from the length and the characters allowed, assuming the password is random, which it is here. The time estimate assumes an attacker who can try 10 billion guesses a second offline.
  • Each chosen character type appears at least once, as many sites require.
  • Passwords are not saved anywhere. Store them in a password manager.

Frequently asked questions

Are these passwords really random?

Yes. They come from crypto.getRandomValues, the browser’s cryptographically secure random generator, without modulo bias. They are never sent over the network.

How long should my password be?

At least 16 characters for important accounts. Length adds more strength than symbols do, so a longer password with only letters and digits is better than a short one with everything.

Is my password stored or logged?

No. It is generated in your browser and exists only on this page until you close or refresh it.

Related tools

More tools that pair well with this one.

Browse all tools