Strong password generator

Make a long random password in one click. It's created on your device with your browser's secure random number generator and never sent or stored.

The password is picked one character at a time using crypto.getRandomValues, the secure random number generator built into your browser. It is the same kind of randomness used for encryption keys, unlike the weaker Math.random many simple generators use. Choices are drawn without bias, and the result always includes at least one character from each type you ticked.

Length matters more than clever symbols. Twenty random characters is far stronger than eight with every symbol on the keyboard. Keep each password unique and store them in a password manager rather than reusing one.

Is the password sent or saved anywhere?

No. It's created in your browser and exists only on this page until you copy it or close the tab.

How long should a password be?

At least 16 characters for anything important, and 20 or more for email and banking, ideally stored in a password manager.

Why avoid look-alike characters?

O and 0, or l and 1, are easy to mix up when you have to type a password by hand from a screen or paper.

What does the 'bits' figure mean?

A rough measure of how many guesses it would take. Each extra bit doubles the work, and over 80 bits is out of reach for any realistic guessing attack.

Everything happens in your browser. Nothing you type or add is uploaded to us or anyone else, and the tool works with no account.

Free to use. Results are for convenience: check anything important before you rely on it.