Password Generator
Strong random passwords, made locally.
Runs entirely in your browser. Nothing you enter or upload leaves your device.
What the password generator does
This tool makes random passwords to your settings, for a new account, a Wi-Fi network, a database user or anything else that needs a secret that is hard to guess. Random passwords avoid the patterns people fall into, such as names, dates and swapped letters, which cracking tools try first.
You can make one password at a time or a list of up to 200, which helps when you set up several accounts at once. A meter shows how strong your settings are.
How to use the password generator
- Set the length with the slider, from 6 to 64 characters. It starts at 20, and 16 or more is a good default.
- Choose which character sets to include: uppercase, lowercase, numbers and symbols. At least one set must stay on.
- Copy the password, or press the refresh button for a new one. Use Several at once to make a list, then copy it or download it as a text file.
Understanding the strength meter
The meter does not inspect the password on screen. It works out the entropy of your settings: the length multiplied by log₂ of the number of characters available. With all four sets on and look-alikes left out, there are 70 characters to choose from, so a 20-character password scores about 123 bits. The meter shows Weak below 45 bits, Fair below 64, Strong below 90 and Very strong from 90 up.
Length adds strength faster than extra character types. Each character from that 70-character pool adds just over 6 bits, while switching symbols off costs only about 0.3 bits per character. If a site rejects symbols, untick them and add a character or two instead.
Questions
How random are these passwords?
They come from your browser’s cryptographically secure random generator (crypto.getRandomValues), with rejection sampling so no character is more likely than another.
What does “bits of entropy” mean?
It measures how many guesses an attacker would need: each extra bit doubles the work. The tool rates 64 to 89 bits as Strong and 90 bits or more as Very strong.
Why are 0, O, 1, l and I left out?
They look alike in many fonts, which causes mistakes when a password is typed by hand. Tick Include look-alikes to use them.
Are my settings remembered?
Yes. Your length and character choices are kept in this browser, so the page opens the same way next time. The passwords themselves are not saved.
Where should I keep them?
In a password manager, which can store a different long password for every site and fill it in for you. Avoid reusing one password across accounts.
Do you see my passwords?
No. They are made in this page and never sent anywhere.