Strong Password Generator

Create strong, truly random passwords in one click. They are generated with your browser's cryptographic random generator (crypto.getRandomValues), never sent to a server, and gone when you close the page.

Strength: — · 0 bits of entropy

    How to create a strong password

    1. Pick a length: we recommend 16 characters or more for important accounts.
    2. Tick the character types the site accepts (uppercase, lowercase, numbers and symbols). More types means a stronger password.
    3. Enable "Avoid ambiguous characters" if you will need to type it by hand or read it aloud.
    4. Click "Generate passwords", copy the one you like and save it in your password manager.

    What makes a password strong?

    Password strength is measured in bits of entropy: how many guesses an attacker would need to brute-force it. A random 16-character password using uppercase, lowercase, numbers and symbols has over 100 bits of entropy, which makes it practically impossible to crack with today's technology.

    What matters most is that it is random and unique. Passwords built from words, dates or keyboard patterns fall quickly to dictionary attacks, and reusing one password across sites means a single breach exposes all your accounts. Use a different password for every service and keep them in a password manager.

    Related tools

    JSON Formatter Base64 Encode/Decode Regex Tester JWT Decoder Diff Checker UUID Generator Image to Base64 XML Formatter Hash Generator README Generator Logo Generator JSON to TypeScript/Zod PDF Compressor Image Compressor Color Converter Timestamp Converter Cron Parser WebM to MP4 Image Cropper QR Code Generator OGG (Opus) to MP4 WebP to JPG (WhatsApp photos) MOV to MP4 HEIC to JPG (iPhone photos) URL Encode/Decode SQL Formatter CSV to JSON YAML to JSON HTML/CSS/JS Minifier Lorem Ipsum Generator Markdown Editor

    Frequently asked questions

    Is it safe to use an online password generator?

    This one is: passwords are generated in your browser with crypto.getRandomValues, the system's cryptographically secure random generator. They are never sent to a server or stored anywhere. You can even go offline and it keeps working.

    How long should my password be?

    At least 12 characters for everyday accounts and 16 or more for email, banking and your password manager. Every extra character multiplies the time needed to crack it.

    What do bits of entropy mean?

    They tell you how many possible combinations exist: 2 to the power of the number of bits. Under 40 bits is weak, 60–80 is reasonable, and over 100 bits is considered very strong.

    Why avoid ambiguous characters?

    Characters like I (capital i), l (lowercase L) and the digit 1, or O and 0, are easy to mix up when reading. Excluding them lowers entropy slightly but prevents typos when entering the password by hand.