Strong password generator
Create random passwords with the browser’s cryptographically secure generator, choose length and character sets, and check how strong an existing password is.
Generate a batch
Passwords are generated on your device with crypto.getRandomValues and are never sent or stored.
What makes a password strong?
Length and randomness. Each random character from a 94-character set adds about 6.6 bits of entropy, so a random 20-character password has about 131 bits — far beyond what anyone can brute-force. A memorable phrase made of human-chosen words is much weaker than it looks, because attackers try dictionary words and common substitutions first.
Good password habits
- Use a different password for every account, and keep them in a password manager.
- Turn on two-factor authentication, ideally with an authenticator app or passkey.
- Change a password immediately if a service tells you it was in a breach.
How this generator works
Characters are picked with crypto.getRandomValues, the browser’s cryptographically secure random source, using rejection sampling so every character is equally likely. At least one character from each set you tick is guaranteed. Nothing is logged or saved.
Sharing a Wi-Fi password with guests? Turn it into a scannable Wi-Fi QR code.
Frequently asked questions
Is it safe to generate passwords online?
This page generates passwords inside your browser, with no network request, so the password exists only on your screen. You can load the page and then go offline to be sure.
How long should my password be?
At least 16 random characters for important accounts. For a password manager’s master password, a long passphrase you can remember is a good alternative.
What does the strength checker look at?
Length, the types of characters used, repeated or sequential patterns, and a list of very common passwords. It gives a rough estimate of guessing time, not a guarantee.