Skip to content
Webmaster Tools
SecurityPassword Generator

Password Generator

Strong random passwords.

bits of entropy · -character pool

Passwords

About the Password Generator

This tool generates random passwords in your browser using crypto.getRandomValues(), a cryptographically secure random source. Characters are picked with rejection sampling, so every character in the pool is equally likely, and each password includes at least one character from every set you enable (when the length allows). Nothing is sent to a server.

Choose a length from 4 to 128 and any mix of lowercase, uppercase, digits and symbols (!@#$%^&*()-_=+[]{};:,.<>/?~|). You can drop look-alike characters (0 O 1 l I |) or list any other characters to exclude, such as quotes that break a config file. The strength meter shows the entropy in bits (length x log2 of the pool size) and a rough offline crack time, assuming 10 billion guesses per second against a fast hash.

How to use it

  1. Set the length with the slider.
  2. Tick the character sets you need and add any exclusions.
  3. Choose how many passwords to make (up to 50) and press Generate.
  4. Copy one, or copy all.

Examples

Length 20, all sets:        k7#Qm2!vRt9@Lp4&Xs8w   ~130 bits, Very strong
Length 12, lowercase only:  mqvtzhrkwpaj           ~56 bits, Fair

Common questions

How long should a password be?

For accounts protected by a password manager, 16 or more random characters from all sets is plenty. Length adds entropy faster than extra symbol types do.

Is a generated password safe to use?

Yes. It is created locally and is not stored or transmitted. Save it in a password manager before leaving the page.

What does "bits of entropy" mean?

It measures how many guesses an attacker needs: each extra bit doubles the search space. Around 80 bits or more is considered very strong for a random password. The estimate only holds for random passwords.