Password Generator

What is the Password Generator?

The Password Generator creates strong, random passwords in your browser. Choose a length from 4 to 64 characters, tick which character types to include (uppercase, lowercase, numbers, symbols), and get a password built from your device’s cryptographic random source. Passwords are generated on your device and are never sent to a server or stored, and you can copy the result with one click. A strength meter shows a rating and an estimated time to crack, so you can see how much a longer password or an extra character set actually adds.

How to use the Password Generator

1. Set the length with the slider or the quick buttons (8, 12, 16, 24, 32). 16 is a sensible default for anything a password manager will store; 20 or more costs nothing extra.
2. Choose the character sets. Leave all four on unless the site you’re signing up to rejects symbols.
3. Turn on “Exclude look-alikes” if the password will be read aloud or typed from a screen. It removes confusable characters such as l, 1, I, O and 0.
4. Click Generate Password, or the refresh button next to the result, for a fresh one. Each result is independent.
5. Copy it straight into your password manager. Don’t reuse it anywhere else.

Features of this password generator

• Cryptographic randomness. Uses crypto.getRandomValues(), the same kind of source browsers use for TLS, rather than a predictable pseudo-random function.
• Generated locally. Once the page has loaded, generating a password needs no connection, and the password is never part of any request.
• Strength meter. Shows a plain-language rating and an estimated time to crack, so “12 characters, letters only” and “12 characters, all sets” are visibly different.
• Look-alike filter. One checkbox removes characters that are easy to misread.
• One-click copy and quick lengths.
• No account, no watermark, no limits.

Why use a generated password instead of making one up?

Attackers don’t guess passwords one at a time; they crack leaked databases with GPUs that test billions of candidates per second, starting with every password that has ever appeared in a breach and every dictionary word with common substitutions. A password a person invents (a word, a year, an exclamation mark) sits near the top of that list. A random 16-character password from all four character sets has roughly 100 bits of entropy and is beyond any current hardware. The generator gives you that randomness without asking you to think of it, and a password manager means you never have to remember it.

For the full explanation of entropy, cracking speeds and how long each kind of password really holds up, read How Strong Does a Password Need to Be?.

Recommended settings

The figures assume a random choice from roughly 94 characters when all four sets are on and 62 when only letters and numbers are on. A password you must memorise or type often is better served by a long passphrase of random words, which this tool does not generate.

Related tools

Encode or decode credentials for a config file with the Base64 Encoder & Decoder (remember, that isn’t encryption). Check a site’s security headers before trusting it with a login using the HTTP Header Checker. Validate a password-strength regex with the Regex Tester.

Frequently asked questions

Is it safe to generate a password online?

With this tool, yes. Generation happens in your browser with a cryptographic random source, and the password is not part of any request. The page itself loads like any website (fonts, analytics), so you can confirm the behaviour by switching off Wi-Fi after it has loaded and generating again.

How long should a password be?

16 characters with all character sets for anything a manager stores; 12 is the practical minimum if it is genuinely random. Length matters far more than “complexity rules”.

Should I change passwords regularly?

Only when there is a reason (a breach, a shared device, a suspected leak). Current NIST guidance dropped forced periodic changes because they push people towards weaker, patterned passwords.

Does the generator store the passwords it makes?

No. Nothing is logged or stored. Once you leave the page the password exists only where you pasted it.