Strong Password Generator
Create strong random passwords and memorable passphrases.
16 or more is a good default for anything important.
Removes O/0 and l/1/I, which matter when a password must be read aloud or typed from print.
Satisfies strict password policies.
What does Password Generator do?
Generate cryptographically secure passwords with full control over length and character sets, or memorable passphrases built from a curated word list. Entropy and estimated crack time are shown for every result.
How to Use Password Generator
- 1Set the length16 characters or more is a good default.
- 2Choose character typesMore types means more entropy per character.
- 3GenerateA new password appears instantly.
- 4Copy it into your password managerBefore you close the tab.
Key Features
- Length from 4 to 128 characters
- Toggle lowercase, uppercase, digits and symbols, with a custom symbol set
- Exclude ambiguous characters such as O/0 and l/1 for passwords you must read aloud
- Guarantee at least one character from each selected set
- Passphrase mode using a 250-word list, with separator and capitalisation options
- Live entropy in bits and an estimated offline crack time
Frequently Asked Questions
How long should my password be?
At least 16 characters for anything important. A 16-character random password from a full alphabet has about 105 bits of entropy, which is far beyond brute force. Length adds more strength than complexity does.
Are these passwords really random?
Yes. They come from crypto.getRandomValues, the browser’s cryptographically secure source, using rejection sampling so every character is equally likely. Math.random is never used.
Is a passphrase as strong as a random password?
It depends on the word count. Six words from a 250-word list gives about 48 bits — decent but not great. Random character passwords reach higher entropy in fewer keystrokes; passphrases win when you must type it by hand regularly.
Do you store the passwords I generate?
No. Generation happens entirely in your browser and nothing is transmitted or logged. Once you close the tab the value is gone, so save it first.
Values come from crypto.getRandomValues, your browser’s cryptographically secure random source, and are never transmitted or logged. Copy anything you need before closing the tab — it cannot be recovered.
Related Tools
Password Strength Checker
Measure real password strength, not just character variety.
Random String Generator
Generate random strings, IDs and codes in bulk.
Random Token Generator
Generate API tokens, session keys and CSRF tokens.
PIN Generator
Generate secure numeric PINs without predictable patterns.