Loading...
Loading...
Generate strong, random passwords with custom length and character sets — everything runs locally in your browser.
A password generator is a tool that builds a random password for you, one character at a time, drawing from a pool of upper- and lowercase letters, numbers, and symbols. The value of using one instead of making up a password yourself is simple: humans pick predictable patterns, machines don't. This generator uses your browser's Web Crypto API — the same cryptographically secure randomness source used by banking and authentication code — rather than the weak 'Math.random()' fallback some online generators use. You control the length and which character classes to include; a 16-character password with three classes is already well past the point where brute-force cracking is feasible. Passwords are created on your device and never sent anywhere.
Drag the slider. 12 is the short-but-acceptable floor; 16 is a good all-purpose length; 20+ is recommended for important accounts (email, banking, password manager master password).
Turn on uppercase, lowercase, numbers, and symbols as the target site allows. More classes = higher entropy per character, which means you can use a shorter password for the same strength.
Turns off the characters that look alike in many fonts (capital I, lowercase l, digit 1, capital O, digit 0). Useful if you'll ever need to type the password from a printed or screenshotted copy.
Tap the refresh icon to roll a new password, or the copy icon to send the current one to your clipboard. Paste it straight into a password manager — don't rely on memorising it.
entropy = length × log₂(charset_size) charset sizes for each class: uppercase (A–Z) = 26 lowercase (a–z) = 26 digits (0–9) = 10 symbols (25 shown) = 25 strength bands (bits of entropy): <40 Very weak 60–80 Strong 40–60 Weak 80–100 Strong 60–80 Fair ≥100 Very strong
Entropy is measured in bits — each bit doubles the number of possible passwords an attacker must try. A 12-character alphanumeric-lowercase password has log₂(36¹²) ≈ 62 bits, which is 'fair'; a 16-character password with all four classes hits about 105 bits, which is beyond what any practical brute-force attack can reach. The strength meter in this tool uses this entropy calculation, not a dictionary lookup, so it can't catch a generator that spits out 'password123' (though since this tool picks every character at random, that scenario is vanishingly unlikely).
Reference: NIST SP 800-63B — Password guidelines
| Settings | Entropy & notes |
|---|---|
Length 8 · lowercase only | ~38 bits — Very weak Crackable offline in hours with commodity hardware. Don't use this profile. |
Length 12 · upper + lower + digits | ~71 bits — Fair Acceptable for low-risk accounts with rate-limited login. Prefer 16+ for anything you care about. |
Length 20 · all four classes | ~131 bits — Very strong Well beyond any realistic offline-crack threat. Use this profile for password-manager master passwords and other high-value credentials. |
Calculate your exact age in years, months, and days from any date of birth.
Check body mass index from height and weight using metric or imperial units.
Work out percentages, percentage change, and percentage of a total in seconds.
Add a tip, split the bill, and share the total evenly across a group.
Last updated