For Everyone
Stop reusing weak passwords. Generate a unique strong password for every site and store them in a password manager.
Generate strong, secure passwords
instantly in your browser.
Create random passwords with custom length, character sets, and strength options. Uses the Web Crypto API — passwords are never stored or sent anywhere. No signup, no ads, 100% private.
- 128max chars
- Cryptorandom
- 100%browser-side
- Freeforever
Password Generator
Strength: Strong
|l,t<GXlyPpsMh6NWhy use a Password Generator?
Cryptographically Secure
Uses crypto.getRandomValues() — the same entropy source used by security professionals and browser cryptography.
Fully Customizable
Control length, character sets, exclude ambiguous characters, and generate up to 20 passwords at once.
100% Private
Your passwords never leave your browser. Nothing is logged, stored, or transmitted. Works completely offline.
Password strength guide
Length Guidelines
8 characters
Minimum acceptable length for low-risk accounts. Can be brute-forced in hours with modern hardware.
Weak — avoid for important accounts16 characters
Good default for most accounts. With mixed character sets this provides very high security for everyday use.
Recommended minimum32+ characters
Use for master passwords, API keys, and high-value accounts. Practically unbreakable with current technology.
Ideal for password managers & SSHCharacter Sets
Uppercase + Lowercase
Using both cases doubles the character pool from 26 to 52 and significantly increases brute-force resistance.
Pool size: 52 chars+ Digits
Adding numbers expands the pool to 62 characters. Almost universally supported by all services.
Pool size: 62 chars+ Symbols
Symbols expand the pool to ~90 characters and exponentially increase the number of possible combinations.
Pool size: ~90 charsQuestions people ask
Are generated passwords stored anywhere?
No. Passwords are generated locally using the Web Crypto API and are never sent to any server. They exist only in your browser.
How random are the passwords?
Passwords use crypto.getRandomValues() — the cryptographically secure random number generator built into every modern browser. It is suitable for security-sensitive use.
What password length should I use?
For most accounts, 16 characters is a good minimum. For high-security accounts like email or banking, use 20 or more characters.
Should I include symbols?
Yes, when the site allows it. Symbols greatly increase entropy. If a site rejects certain symbols, disable them and regenerate.
What is the 'No Similar' option?
It removes visually ambiguous characters like i, I, l, L, 1, o, O, and 0 that can be confused when reading a password aloud or typing it manually.