Password Generator
Generate strong, random passwords online for free — choose length and character sets, with a strength meter. Cryptographically secure and never uploaded.
100% private — runs entirely in your browser. Your files never leave your device.
Passwords are generated with your browser’s cryptographically-secure random generator and never leave your device or get stored. Use a unique password per site and a password manager to keep them.
How to use the Password Generator
- Set the length with the slider.
- Choose which character sets to include.
- Optionally exclude look-alike characters.
- Copy your password (or refresh for a new one).
What you can use it for
- Create strong, unique passwords
- Generate secure API keys and secrets
- Avoid look-alike characters for typed passwords
- Stay private — generated locally, never sent
More free tools
Need a quick utility?
Count, convert, compare and generate with our free text and utility tools.
Browse all free tools →How strong is your password?
Strength is measured in bits of entropy: length × log2(size of the character set). Every extra character multiplies the number of possible passwords. Using upper- and lowercase letters plus digits (62 characters) gives about 6 bits per character:
| Length | Letters + digits | Verdict |
|---|---|---|
| 8 | ≈ 48 bits | Weak — avoid for anything important |
| 12 | ≈ 71 bits | OK for low-value accounts |
| 16 (default) | ≈ 95 bits | Strong |
| 20+ | ≈ 119 bits or more | Very strong — ideal in a password manager |
Adding symbols raises the bits per character further. Length matters more than complexity.
How the passwords are generated
Passwords are created in your browser with crypto.getRandomValues, the browser's cryptographically secure random number generator, using rejection sampling so every character is equally likely. Nothing is sent to a server or stored.
Good password habits
- Use a different password for every account, kept in a password manager.
- Tick “Exclude look-alikes” for passwords you'll have to type or read aloud (it drops l, 1, I, O and 0).
- Turn on two-factor authentication wherever it's offered.
Frequently asked questions
Are these passwords secure?
Yes — they're generated with your browser's cryptographically-secure random generator and never sent anywhere or stored.
What options can I set?
Length (4–64), uppercase, lowercase, digits, symbols, and an option to exclude look-alike characters (l, 1, I, O, 0).
What does the strength meter mean?
It estimates entropy in bits from the length and character set — higher is harder to guess. Aim for 'Strong'.
Should I reuse a generated password?
No — use a unique password per site and store them in a password manager.