Strong password generator
Generate a strong, random password instantly. It’s created on your device and never sent anywhere.
How this password generator works
Each character is chosen with crypto.getRandomValues, your browser’s cryptographically secure random number generator, using rejection sampling so every character is equally likely. The tool guarantees at least one character from each set you tick, then shuffles. The strength shown is the entropy in bits: every extra bit doubles the number of guesses an attacker needs.
As a rough guide, under 50 bits is weak, 60–80 bits is strong for online accounts and 100+ bits is excellent. Length matters most: going from 12 to 16 characters adds more than switching on symbols.
Password tips that actually matter
- Unique for every site. Reuse is how one data breach turns into five hacked accounts.
- Use a password manager so you never have to remember them.
- Turn on two-factor authentication (an authenticator app beats SMS).
- For passwords you must type or remember, use a long passphrase of 4–6 random words.
Read more: how to create a strong password.
Frequently asked questions
Is this password generator safe?
Yes. Passwords are generated in your browser with the Web Crypto API (crypto.getRandomValues), the same random source used for encryption keys. Nothing is sent to our server or stored.
How long should a password be?
Use at least 12 characters for everyday accounts and 16 or more for email, banking and your password manager. Length adds more strength than symbols do.
What makes a password strong?
Being long, random and unique. A random 16-character password of letters and digits has about 95 bits of entropy, far beyond what attackers can guess. Never reuse a password on two sites.
Should I use a password manager?
Yes. Nobody can remember dozens of random passwords. A password manager stores them encrypted and fills them in, so you only remember one strong master password. Turn on two-factor authentication too.