Password Generator

Generate a strong random password with the character sets and length you choose.

Last updated

🔒 What you type here never leaves this device. It all happens in your browser, which is told to block this page from sending anything to other websites. Try it with airplane mode on: it still works. Check for yourself

Sent to other websites from this page: 0

Your password will appear here.
Copied

How to generate a strong password

  1. Choose the length; 16 or more is a good default.
  2. Tick the character sets you want, and exclude look-alike characters if you’ll type it by hand.
  3. Click Generate, then Copy password into your password manager.

About this tool

Characters are chosen using crypto.getRandomValues, the Web Crypto API's cryptographically secure random number source — not Math.random(), which is fast but not designed to resist prediction and shouldn't be used for anything security-sensitive. The entropy shown is length × log₂(character set size), the standard measure of how many attempts a brute-force search would need on average; 60+ bits is generally considered strong for an online account, and 80+ bits for something you want to withstand offline attack for years. Every character set you tick is guaranteed to appear at least once, as many sign-up forms require.

Nothing generated here is sent to a server or stored anywhere — the entire tool runs as JavaScript in your browser tab, and the password exists only in your browser until you copy it.

Questions about passwords

How long should a password be?

At least 12 characters, and 16 or more for important accounts. Length adds more strength than symbols do.

What do the entropy bits mean?

How hard the password is to guess by brute force. 60 bits or more is strong for an online account, and 80 or more resists offline attacks for years.

Are these passwords really random?

Yes. They use your browser’s cryptographically secure random number generator, not the ordinary one used for games.

Is the password sent or saved anywhere?

No. It’s made in your browser and forgotten when you leave the page. Keep it in a password manager.

Should I use a passphrase instead?

If you need to remember or type it, yes: five or six random words are as strong and much easier. Try the passphrase generator.

☕ Support toolcrate