Need several at once?
Generate five passwords with the same settings — handy for setting up multiple accounts.
Tap “Generate 5” and your passwords will appear here, each with its own copy button.
Create a random password that's practically impossible to guess — in one tap, right here in your browser.
Generate five passwords with the same settings — handy for setting up multiple accounts.
Tap “Generate 5” and your passwords will appear here, each with its own copy button.
Three steps, a few seconds, and you have a password no one can guess.
Pick a length (16 or more is a great default) and decide which character types to include — letters, numbers, symbols.
Your browser's built-in cryptographic random generator creates the password on your device. Nothing is typed by a person, so there are no patterns to guess.
Tap Copy, paste it into the account you're creating, and save it in a password manager so you never have to remember it.
Everything you might want to know before trusting a generated password.
Yes. This tool uses crypto.getRandomValues — the cryptographic random number generator built into your browser, the same class of randomness used to secure online banking sessions. It never uses predictable methods like Math.random, and every character is drawn independently, so there are no patterns for an attacker to exploit.
No — never. Generation happens entirely on your device, inside this page. There is no server involved, no account, and no database: the password exists only in your browser tab until you copy it. Closing the tab erases it. That's also why the tool works the same with your internet connection switched off.
Length matters more than anything else. 12 characters is a reasonable minimum, 16 is a strong default, and 20 or more is better still for important accounts like email and banking. Each extra character multiplies the number of combinations an attacker would have to try.
It shows an entropy estimate in bits, calculated from your password's length and the size of the character pool it was drawn from. Under 40 bits is weak, 40–59 is fair, 60–79 is strong, and 80 bits or more is excellent — at that point, guessing it by brute force is beyond any realistic attacker.
It removes characters that are easy to confuse when you read or type a password by hand: 0 and O, 1, l and I. Turn it on when you'll need to read the password aloud or type it on another device; leave it off for the largest possible character pool.