Password Generator
Generate strong random passwords or PINs with custom length and character sets, and check their strength. Free, created in your browser, never stored.
Generate passwords that survive a real attack
This generator uses your browser's cryptographically secure random number generator (crypto.getRandomValues) — the same primitive password managers use — not the predictable Math.random(). Choose the length and character sets, and every password is drawn with uniform probability, so no character position is guessable.
Length beats cleverness. A random 16-character password from a 70-symbol alphabet has about 98 bits of entropy — far beyond any current brute-force capability — while an 8-character one sits near 49 bits, which dedicated hardware can exhaust. If a site allows it, prefer longer over more exotic symbols.
Passwords are generated on your device and never transmitted or stored. There is no history and nothing to intercept: close the tab and the password exists only where you pasted it. Pair it with the MFA authenticator here to store second factors, and use a password manager rather than reusing anything.
Frequently asked questions
How long should a password be?
At least 16 characters for anything that matters, and longer where the site allows it. Length adds more security than extra symbol types, and a password manager means you never have to type it.
Can it generate a numeric PIN?
Yes. Switch to PIN mode and choose a length from 4 to 12 digits. Each digit is drawn from the same cryptographic random source as the passwords.
A site rejected one of the symbols. What should I do?
The symbol set is the punctuation on a standard keyboard, including brackets, @, #, $, % and ^, and some sites refuse a few of these. Untick symbols and increase the length instead; the extra characters more than make up the difference.
Does it generate word-based passphrases?
No. It produces random character strings and PINs only. A passphrase of four or more random words is also a sound choice; just avoid phrases that appear in print.
How long should a password be?
Use at least 12 characters for everyday accounts and 16 or more for email, banking and anything that resets other passwords. The 8, 12, 16, 20 and 32 buttons set those lengths in one tap; PINs are 4 to 12 digits.