Password generator
Make a strong random password in your browser
Runs in your browser. Nothing is uploaded.
How it works
This makes a random password in your browser using its secure random number generator. A 20-character password using all character types has about 128 bits of strength, which is far beyond guessing. The password is never sent anywhere, and it’s gone when you leave.
strength in bits = length × log₂(characters to choose from)
Each character is picked at random from the types you choose, and every character is equally likely. We use your browser’s secure generator. If it isn’t available, we show an error, because we won’t make a weak password.
Strength is measured in bits. Each extra bit doubles the number of guesses needed.
Worked example. A 20-character password from 87 characters has 20 × log₂(87) ≈ 128 bits of strength.
Examples
| Password | Rating | Strength |
|---|---|---|
| 6 digits | Weak | 19 bits |
| 8 letters and numbers | Fair | 47 bits |
| 12 of all types | Strong | 77 bits |
| 20 of all types | Very strong | 128 bits |
| 32 of all types | Very strong | 206 bits |
What this tool doesn’t cover
- Strength assumes you use the password once and keep it secret.
- We don’t store passwords, so save it in a password manager.
Questions
Is it safe to use an online password generator?
This one runs in your browser. The password is never sent to us or stored.
How long should a password be?
Use at least 15 characters. A password manager makes long, unique passwords easy to use.
Why are the characters shown in groups?
Groups are easier to read. The copied password has no spaces.
What makes a generated password strong?
Length and randomness. A long password from a true random source is far harder to guess than a short one with swapped letters.
Should I use a different password for every site?
Yes. If one site leaks your password, attackers try it on others. A password manager means you don’t have to remember them.
Was this useful?
Built by QuickToolz.
Sources: NIST SP 800-63B: Digital Identity Guidelines (opens in a new tab), W3C Web Cryptography API (opens in a new tab)
Sponsored
Advertise here10 spots leftSponsored
Advertise here10 spots left