Password Generator
Strong random passwords and memorable passphrases, generated on your device.
How to use Password Generator
- Choose a random password or a passphrase of words.
- Set the length and character types.
- Copy it straight into your password manager. Select Generate new for another.
How it works
Passwords are generated with crypto.getRandomValues, the browser’s cryptographically secure random number generator, using rejection sampling so every character is equally likely (no modulo bias). Each selected character type is guaranteed to appear at least once. Nothing is sent, logged or stored.
Strength is shown as entropy in bits: a 20-character password drawn from all 87 characters has about 129 bits, far beyond what any attacker can guess. A passphrase picks words from a list of 4,096 common English words (12 bits each), so 5 words plus a number give about 66 bits and are much easier to type and remember. For important accounts, use a password manager and a unique password for every site.
Example
A 16-character password using lowercase, uppercase, digits and 25 symbols has 16 × log₂(87) ≈ 103 bits of entropy.
Frequently asked questions
How long should a password be?
At least 12–16 characters for random passwords, more for very important accounts. Length matters more than complexity. Current NIST guidance (SP 800-63B) favours long passwords and passphrases over forced complexity rules.
Is it safe to generate passwords online?
This generator runs entirely in your browser, so the password never travels over the internet. You can verify this by turning off your connection after the page loads.
Passphrase or random password?
Random passwords are strongest per character and best stored in a password manager. Passphrases are better when you must type or remember them, like a manager’s master password.
Why do some sites reject my password?
Some sites limit length or symbols. Turn off symbols or shorten the length to match the site’s rules.
Limitations
- Strength assumes the password is random and unique; reusing it on several sites makes it weak.
- The passphrase list is English only.
Last reviewed November 9, 2026. How we build and test tools.