Password generator

Create strong, random passwords that never leave your browser. Tune the length and character sets, then copy.

StrengthVery strong · ~129 bits

One short email when we ship a new free tool, and nothing else.

One field: your email. Then confirm one link.

Free. We email you only when that page actually changes, at most one email per change. One-click unsubscribe, and we never share your address.

Is it secure?

Passwords are generated on your device using the browser's cryptographic random number generator (crypto.getRandomValues), the same class of randomness used for security keys. Nothing is sent to a server, logged, or stored. Reload the page and the password is gone.

What makes a strong password

  • Length matters most. Aim for 16 characters or more.
  • Mix character types: upper, lower, numbers and symbols widen the search space.
  • Use a unique password per site, and store them in a password manager.
  • The strength meter shows estimated entropy in bits. Above 90 bits is very strong.

Look-alike characters

Turn on "Exclude look-alikes" to drop characters that are easy to confuse when typing or reading aloud, such as the capital I, lowercase l, the digit 1, capital O and zero.

The generator is the easy half

A unique password per site only works if something remembers them

A strong password is the part this tool solves in a click. The part that actually stops breaches is not reusing it: credential-stuffing attacks replay one leaked email-and-password pair across every site you own, so one shared password puts all of them at risk. Using a different generated password per login is only practical if a password manager stores them for you. Bitwarden's free tier holds unlimited passwords and syncs across your devices, which is genuinely enough for most people, so it gets no link here. Pay for a manager only when you need more than that:

  • 1Password (coming soon) when you want the most polished family and team sharing, plus travel mode for crossing borders.
  • Proton Pass (coming soon) when you want a Swiss, privacy-first option with end-to-end encryption and hide-my-email aliases.

These are affiliate links to each manager's partner programme. We have not joined yet, so they are clearly marked placeholders until we are accepted. Bitwarden's free tier gets no link because it is genuinely enough for most people. The generator, and your password, run entirely in your browser; the links change neither.

More everyday web tools

Related tools