Online Password Generator
Creates a random password of the length and strength you need. The password is generated in your browser and never sent anywhere. Free, no ads, no sign-up.
Strength: high · 103 bits
Complexity
Password length
Character set
How to use it
Choose a strength level: simple, medium, strong, or maximum.
If needed, adjust the length and character sets — letters, digits, special characters.
Copy the password with the button next to the field. Not happy with it? Generate a new one.
Features
Four strength levels
From a short password of letters and digits to 32 characters with special characters. A level sets both the length and the character sets in one click.
Fine-tuning
Length from 4 to 128 characters; lowercase and uppercase letters, digits, special characters. Look-alike characters — 0 and O, 1 and l — can be excluded if the password will have to be typed by hand.
True randomness
Characters are picked by the browser’s cryptographic random number generator (the Web Crypto API), not by plain Math.random. The password includes at least one character from every set you select.
The password never leaves your browser
The password is created on your device. It is not sent to a server, not stored, and never ends up in logs.
Strength rating
Below the password you see its strength and its entropy in bits — the higher the number, the longer a brute-force attack would take.
Questions and answers
Is it safe to generate a password online?
Here, yes: the password is created in your browser and is not sent to a server, so nobody but you ever sees it. A service that generates the password on its own side and sends it to you ready-made is harder to trust.
How long should a password be?
For most websites, 12 characters with mixed-case letters and digits is enough. For email, banking, and your password manager, use 16 or more characters with special characters: your email is what the rest of your accounts are recovered through.
What is password entropy?
A measure of unpredictability: how many combinations would have to be tried to guess the password. It is calculated from the length and the number of possible characters. Below 50 bits the password is weak, 80 and up is strong, and 120 and up leaves a wide margin.
Why exclude look-alike characters?
Zero and the letter O, or the digit one and a lowercase l, are indistinguishable in some fonts. If the password will have to be retyped from a screen or read out loud, exclude them — there will be fewer accidental mistakes.
How should I store strong passwords?
In a password manager: it remembers your passwords and fills them in for you, so you only need to remember one master password. Use a separate password for every site — then a leak on one will not expose the others.
Need a custom service or work on your website?
We built these tools ourselves. We build websites, client dashboards, and internal business services the same way — and take over support of ones that are already running.