How to use
- Set the length. 16 characters or more is a good default for accounts.
- Choose which character types to include. Turn on Avoid look-alikes if the password will be typed by hand or read aloud.
- Copy one of the five passwords, or press Generate new for another set.
- Save it in a password manager rather than reusing it on several sites.
What makes a password strong?
Length matters most. Each extra character multiplies the number of possible passwords. Entropy, shown in bits, measures this: a 16-character password using all four character types has about 104 bits, far beyond what can be guessed by brute force. Use a different password for every site, so one leak doesn’t expose the rest.
How this generator works
Characters are picked with crypto.getRandomValues, the same source browsers use for encryption keys. Rejection sampling makes every character equally likely, and each password is checked to include every character type you selected.
Frequently asked questions
Is it safe to generate passwords online?
This page makes passwords entirely in your browser. They are never sent over the network or saved. Only your length and character settings are remembered on this device.
How long should my password be?
At least 12 characters, and 16 or more for important accounts such as email and banking. For a Wi‑Fi password, 20 or more is easy since you rarely type it.
Some sites reject symbols. What should I do?
Turn off Symbols and add a few characters of length instead. A longer password without symbols can be just as strong.
What does “Avoid look-alikes” do?
It removes characters that are easy to confuse, such as capital I, lowercase l, the number 1, capital O and zero.