Password Generator
Generate strong random passwords using your browser's cryptographic random source. Nothing leaves your device.
What makes a password strong
Strength comes from unpredictability multiplied by length. A 16-character random string drawn from a large character set is effectively impossible to brute force with current hardware, while a short password with a capital letter and an exclamation mark is not.
Ambiguous characters such as l, I, 1, O and 0 are excluded here so you can read your password back accurately when typing it manually.
Storing passwords properly
Use a password manager. It is the only realistic way to keep a unique long password on every account. Protect it with one strong master password and turn on two-factor authentication on your most important accounts.
Frequently asked questions
Is this password generator safe?+
Yes. Passwords are generated in your browser using the Web Crypto API and are never transmitted, logged or stored anywhere.
How long should a password be?+
At least 16 characters for important accounts. Length contributes far more to strength than special-character rules do.
Should I reuse passwords?+
Never. One breach then compromises every account sharing that password. Use a password manager and a unique generated password per site.
Are random passwords better than passphrases?+
Both work if they are long enough. Random strings are stronger per character; passphrases are easier to type on a phone or TV.