Password Generator
Generate a strong password with the character sets you need. Randomness comes from your browser's cryptographic generator and nothing is transmitted, logged, or stored.
Runs entirely in your browser. Nothing you paste is uploaded.
Generated passwords will appear here...
About the Password Generator
Length beats complexity. A 20-character password drawn from lowercase letters alone has more entropy than a 10-character password using every symbol on the keyboard, and it is far easier to type. Aim for 16 characters minimum, more for anything that protects other credentials.
The only real answer is a password manager with a unique random password per site. Reuse is what turns one company's breach into a compromise of your email, and no amount of complexity rules protects against it.
Frequently asked questions
Is this password generated safely?
Yes. It uses crypto.getRandomValues(), the browser's CSPRNG, with rejection sampling so no character is more likely than another. Generation is local and nothing is sent over the network.
How long should a password be?
16 characters minimum for ordinary accounts, 24 or more for a password manager master password or anything protecting other credentials.
Are special characters necessary?
Less than people think. Adding four characters of length increases entropy more than adding symbols to a short password, and long passwords are easier to type correctly.