How to use the Password Generator
- Set the password length — at least 16 characters is recommended.
- Choose character types; turn on "Exclude look-alike characters" for passwords you type by hand.
- Passwords and their strength appear instantly; press "Regenerate" for a new set.
- Press "Copy" and paste into your password manager or sign-up form.
Examples
20 characters with letters, digits and symbols
Length 20 | A-Z a-z 0-9 symbolsk7#Vq2-mN8!rT4wZ@p9L
Strength: Very strong (about 129 bits)What makes a password strong
Strength depends mainly on length and the size of the character set, estimated as entropy = length × log₂(character set size). Aim for 80 bits or more, and 100+ bits for important accounts. For example, 16 characters drawn from upper and lowercase letters, digits and symbols (about 87 characters) gives roughly 103 bits.
More important than changing passwords regularly is using a different password for every site, storing them in a password manager and enabling two-factor authentication.
Specs & key facts
| Randomness | Web Crypto API (crypto.getRandomValues) with unbiased sampling |
|---|---|
| Length | 4–128 characters |
| Character sets | Uppercase, lowercase, digits, symbols; optional look-alike exclusion |
| Guarantee | At least one character from every selected set |
| Batch | 1, 5 or 10 passwords at once |
| Processing | In your browser (never uploaded or stored) |
FAQ
Are passwords generated online safe?
This tool generates passwords in your browser with cryptographically secure randomness; nothing is sent to a server or logged. Save the password straight into a password manager.
How long should a password be?
Use at least 16 characters mixing letters, digits and symbols. If a site only accepts letters and digits, use 20 or more characters for similar strength.
What does entropy (bits) mean?
Entropy measures how many guesses a brute-force attack needs; each extra bit doubles the work. 80 bits means about 2^80 guesses.
Why exclude look-alike characters?
0 and O, or 1 and l, are hard to tell apart in some fonts. Excluding them helps when you type or read the password aloud, at the cost of slightly lower strength.