Password generator. Strong, random, gone when you leave.

How to use the Password Generator

This generator makes random passwords or word based passphrases with your browser's cryptographic random source, crypto.getRandomValues, and shows an entropy estimate in bits. A fresh result appears every time you change a setting. Use it for account passwords, Wi-Fi keys or passphrases you need to remember.

Step by step

1. 1
   Choose a mode

   Press Random for a string of characters or Passphrase for real words joined together. Random is the default, and switching modes makes a new result straight away.

2. 2
   Set the length

   In Random mode, drag the Length slider from 6 to 64 characters. It starts at 20.

3. 3
   Pick character types

   Tick Uppercase (A-Z), Lowercase (a-z), Digits (0-9) and Symbols to build the pool. All four are on by default, and every result contains at least one character from each type you tick.

4. 4
   Add the optional rules

   Tick Exclude ambiguous (O0Il1) to drop O, I, l, 0 and 1. Tick No repeated characters to use each character once; if the length is longer than the pool allows, it is cut down to fit and a message says so.

5. 5
   Set up a passphrase

   In Passphrase mode, drag Words from 3 to 8 (default 4), choose a Separator (hyphen, underscore, dot or space), and keep or untick Capitalize words and Append a number, which adds a number from 0 to 99 at the end.

6. 6
   Generate and copy

   Press Generate or the circular arrow for a new result, and the copy button beside it to copy it. Generate 10 lists ten results at once, each with its own copy button.

Reading the strength meter

• Random mode entropy is length × log2 of the pool size. All four types make a pool of 86 characters, so the default 20 characters is about 129 bits.
• Passphrase entropy is words × log2 of the word list size, plus about 6.6 bits for the number. The list holds 607 words, about 9.2 bits each, so the default 4 words with a number is about 44 bits.
• Ratings: under 40 bits is Weak, 40 to 59 is Fair, 60 to 89 is Strong and 90 or more is Excellent. The bar fills and changes color to match.
• Capitalize words adds no bits in the meter, because every word is capitalized the same way and an attacker can assume it.

Tips and common mistakes

• The default passphrase rates only Fair. Use 6 words with the number on to reach Strong at about 62 bits, or 8 words for about 81 bits.
• If a site rejects symbols, untick Symbols and add a few characters of length instead. Each character drawn from the 62 letters and digits adds about 6 bits.
• Use Exclude ambiguous for passwords you will read aloud or type from paper. The pool shrinks slightly, so the bit count drops a little.
• Any change to a setting replaces the current result, and nothing is saved. Store the password in a password manager before you touch the controls again.

Privacy and limits

Every password is created in your browser with crypto.getRandomValues, using rejection sampling so every slot in the character pool or word list is equally likely. Nothing is sent over the network and nothing is stored, so a result exists only on screen and wherever you paste it.

Back to the tool

Everything a password tool should do.

• Generate random passwords from 6 to 64 characters with full control over uppercase, lowercase, digits and symbols.
• Switch to passphrase mode for 3 to 8 real words joined by your chosen separator, easier to type and remember.
• Exclude ambiguous characters like O, 0, I, l and 1 to avoid transcription errors when reading passwords aloud.
• Enforce no repeated characters for extra uniqueness in shorter passwords.
• Bulk-generate 10 at once and copy any individual result with a single click.
• Read the live entropy meter in bits to instantly understand how strong each result is.

Frequently asked questions.

More free generators.

Browse the full free-tool library →