How to use the password generator
- Set the length. 16 or more is recommended.
- Choose which character types to include.
- Copy the password and store it in a password manager.
About this tool
Pick a length of 16 or more and the character types you want, and get a random password made with your browser cryptographic generator. An entropy estimate shows its strength. Save it in a password manager and use a unique password for every account.
How long should it be?
Length matters more than clever symbols. Each extra character multiplies the guesses an attacker needs. The table uses all four character types (85 possible characters):
| Length | Strength (bits) | Verdict |
|---|---|---|
| 8 | 51 | Weak against modern hardware |
| 12 | 77 | Strong |
| 16 | 103 | Very strong |
| 20 | 128 | Far beyond any practical attack |
Using only lowercase letters and digits drops a 12-character password to about 62 bits, which is why mixing types and using more length both help.
How this generator works
Characters are picked with your browser cryptographic random source, the same kind used for encryption keys, and not with an ordinary random number function. The generator avoids a bias that simple methods introduce and guarantees at least one character from each type you select. The password exists only in your browser tab. It is never sent or stored.
Good habits
- Use a different password for every account, so one breach does not open the rest.
- Store them in a password manager rather than memorising or reusing them.
- Turn on two-step verification or a passkey for email, banking and any account that matters.
- Do not build passwords from names, birthdays or phone numbers.
- Change a password straight away if a service tells you it was breached.
Avoiding look-alike characters
Tick the look-alike option if you will type the password by hand from a screen or a printed page. It removes characters that are easy to confuse, such as O and 0 or l and 1. This slightly reduces strength, so add a couple of extra characters to make up for it.
Frequently asked questions
Is it safe to use a generated password from a website?
This one is created locally with your browser cryptographic random source and never leaves your device.
How long should a password be?
16 characters with mixed types is strong for most accounts. Use longer for your password manager and email.
What does entropy mean here?
It estimates how many guesses an attacker needs. Above 80 bits is considered very strong.
Are website password generators safe?
This one works entirely in your browser and makes no network request for the password. You can check this in your browser network panel.
Should I include symbols?
They help, but some sites reject certain symbols. If a site refuses a password, untick Symbols and increase the length instead.