Strong Password Generator

Create strong, random passwords with the length and character types you choose — generated in your browser with a cryptographic random source, never sent anywhere.

—

🔒 Runs entirely in your browser — nothing you type is uploaded or stored on a server.

The Password Generator creates strong, random passwords to your exact specification. Choose the length and which character types to include — uppercase, lowercase, numbers and symbols — and a fresh password appears instantly, with a live strength meter and its entropy in bits so you can see just how hard it would be to guess. Every generated password is guaranteed to include at least one character from each type you turned on.

Randomness is where most password tools quietly cut corners. This one draws from your browser's cryptographically secure random source (crypto.getRandomValues) and uses rejection sampling so every character is equally likely — no bias toward certain letters. That matters: a password is only as strong as the randomness behind it. Nothing you generate is transmitted, logged or stored — the password is built on your device and never leaves it.

Practical touches make it easy to use everywhere. Turn on “no look-alikes” to drop easily confused characters like 0/O and 1/l/I for passwords you'll type by hand, generate a whole batch at once when you're setting up several accounts, and copy any password with one click. For the strongest protection, pair a long random password with a password manager and turn on two-factor authentication.

How to use

  1. Set the password length with the slider — 16 or more is a good default.
  2. Tick the character types to include: uppercase, lowercase, numbers and symbols.
  3. Turn on “No look-alikes” if you'll type the password by hand and want to avoid 0/O and 1/l/I confusion.
  4. Set the quantity if you need several passwords at once.
  5. Click Generate (or the ↻ button) and copy your password — watch the strength meter to judge how tough it is.

Examples

A strong everyday password
Length 16 with all four character types gives around 100 bits of entropy — far beyond what any attacker can brute-force.
Easy to type
Turn on “No look-alikes” for a password you'll read off a screen and type into a TV or console without mixing up 0 and O.
Bulk set-up
Set the quantity to 20 to generate a batch of unique passwords when creating several accounts or service credentials at once.
Maximum security
Push the length to 32+ with symbols on for encryption keys, admin accounts or anything that protects sensitive data.

Frequently asked questions

Are these passwords really random and secure?
Yes. They are generated with your browser's cryptographic random number generator (crypto.getRandomValues) using unbiased sampling, which is the same class of randomness used for security keys — not the predictable Math.random. Each password also includes at least one character from every type you selected.
Is my password sent to a server?
No. The entire generator runs as JavaScript in your browser, so passwords are created on your own device and are never transmitted, logged or stored. You can even disconnect from the internet and it still works.
What does the “bits of entropy” number mean?
Entropy measures how unpredictable a password is — how many guesses an attacker would need on average. More length and more character types raise it. Roughly, under 40 bits is weak, 60–80 is strong, and 80+ is very strong and effectively unguessable by brute force.
How long should my password be?
For most accounts, 16 characters with a mix of types is excellent. Use 20–32+ for high-value accounts, encryption or anything critical. Length adds strength faster than complexity, so longer is better.
What does “no look-alikes” do?
It removes characters that are easy to confuse — the digit 0 and letter O, and the digit 1 with lowercase l and uppercase I. This helps when you have to read a password off a screen and type it somewhere it can't be pasted.
Should I reuse a generated password?
No. Use a unique password for every account and store them in a reputable password manager. That way a leak on one site never puts your other accounts at risk. Turn on two-factor authentication wherever it's offered.

Related tools

UUID GeneratorGenerate random v4 UUIDs, time-ordered v7 UUIDs, or a nil UUID — one or thousands at a time, with a cryptographic random source in your browser.Hash GeneratorCompute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text at once — instantly and privately in your browser.Random Word GeneratorGenerate random English words, filtered by length and starting letter, from a built-in word list.Slug GeneratorTurn any title into a clean, SEO-friendly URL slug — lowercase, hyphenated and free of special characters.Lorem Ipsum GeneratorGenerate classic placeholder text by paragraphs, sentences or words in one click.