Secure Password Generator
Create strong, random passwords and PINs with your browser’s cryptographic random number generator. Choose the length and characters, see the estimated strength, and copy with one click.
Free Strong Password Generator
A strong password is long, random and used for only one account. People are bad at making random choices, so passwords we invent tend to follow patterns that attackers try first. This password generator removes that weakness. It builds each password from your browser’s cryptographically secure random number generator, so every character is chosen unpredictably. The password is created on your device and is never sent anywhere.
How to Generate a Secure Password
- Choose Password or PIN.
- Set the length with the slider. For important accounts, use at least 16 characters.
- Pick the character types to include, and tick the options that suit the site you are using.
- Press Generate for a new password. The strength meter updates for every change.
- Press Copy and paste the password into the sign-up form, then save it in your password manager.
Options Explained
| Option | What it does |
|---|---|
| Length | The number of characters, from 4 to 128. Length is the most important factor in strength. |
| Character types | Lowercase, uppercase, numbers and symbols. Every type you tick appears at least once in the result. |
| Avoid similar characters | Leaves out characters that look alike, such as l, 1, I, O and 0. Useful if you will type the password by hand. |
| Avoid ambiguous symbols | Leaves out brackets, quotes, slashes and other symbols that some websites and shells handle badly. |
| Characters to exclude | Removes any characters you list, for sites that reject certain symbols. |
| Hide on screen | Shows dots instead of the password, which is helpful when you are sharing your screen. Copy still gives you the real password. |
What Makes a Password Strong?
Strength is measured in bits of entropy. Each extra bit doubles the number of guesses an attacker needs. For a random password, entropy is the length multiplied by the logarithm (base 2) of the number of possible characters. The table shows entropy and the average time to guess a random password at 100 billion guesses per second, which is a fast offline attack against a weakly protected password hash.
| Characters used | 8 characters | 12 characters | 16 characters | 20 characters |
|---|---|---|---|---|
| Lowercase letters only (26) | 38 bits 1 second | 56 bits 6 days | 75 bits 7 thousand years | 94 bits 3 billion years |
| Letters and digits (62) | 48 bits 18 minutes | 71 bits 512 years | 95 bits 8 billion years | 119 bits trillions of years |
| Letters, digits and symbols (94) | 52 bits 8 hours | 79 bits 75 thousand years | 105 bits trillions of years | 131 bits trillions of years |
Adding length helps far more than adding symbols. A 16-character password made of letters and digits is stronger than an 8-character password with every type of symbol.
Password Safety Tips
- Use a different password for every account. One data breach should never open your other accounts.
- Use a password manager. It remembers long random passwords so you do not have to.
- Turn on two-factor authentication for email, banking and social media.
- Avoid personal details such as names, birthdays and phone numbers, and never use common words or keyboard patterns.
- Change a password right away if a service tells you it was breached.
Is It Safe to Generate a Password in a Browser?
Yes, if the page uses the right tools. This generator uses the Web Crypto API, the same source of randomness that browsers use for secure connections, and it picks each character without bias. Nothing leaves the page: there are no passwords sent to a server, no storage and no logging. For extra caution, use your own trusted device and a browser without untrusted extensions.
When to Use a PIN
PINs have very few possible values, so they are only suitable where the system limits wrong guesses, such as a phone lock screen or a bank card. A longer PIN is better. Never use a PIN as the only protection for something that an attacker can guess against freely.
Frequently Asked Questions (FAQ)
Is this password generator free?
Yes. It is free, needs no sign-up and has no limit on how many passwords you can create.
Do you store or see my passwords?
No. Passwords are created in your browser and are never sent to a server, stored or logged. When you close the page, they are gone.
How long should my password be?
Use at least 12 characters for ordinary accounts and 16 or more for email, banking and your password manager. Longer is always better.
Do I need symbols in my password?
Symbols add some strength, but length matters more. If a site allows long passwords, a longer password with letters and digits is a good choice. Some sites require symbols, so the option is there.
What is entropy?
Entropy measures how unpredictable a password is, in bits. Every extra bit doubles the work needed to guess it. Passwords above about 80 bits are considered very strong.
Why does the generator avoid similar characters when I ask it to?
Characters like l, 1, I, O and 0 are easy to confuse. Avoiding them makes a password easier to read and type by hand without making it much weaker.
Is a passphrase better than a random password?
A long passphrase of random words can be strong and easier to remember. For accounts you manage with a password manager, a long random password is the simplest choice.