Password Generator
Generate random passwords with the length and character types you choose.
Generated in your browser using the Web Crypto API — never sent anywhere.
Create a random password you don’t have to invent
Password Generator builds a random password from the character types you choose, between 6 and 64 characters long. A new one appears as soon as the page loads, and again whenever you change the length or the character options.
The randomness comes from your browser’s Web Crypto API (crypto.getRandomValues), which is designed for cryptographic use, rather than the predictable Math.random. Your passwords are generated on your device and are never sent or stored by the page.
How to generate a secure password
- Drag the Length slider. The default is 16 characters.
- Tick the character types you want: Uppercase, Lowercase, Numbers and Symbols are all on to begin with.
- Check the strength label under the password.
- Click Generate Password or the refresh icon for a different one.
- Click the copy icon next to the password and paste it straight into the sign-up form or your password manager.
How the strength rating is worked out
The label is an entropy estimate: length multiplied by log2 of the number of possible characters. Below 50 bits shows Weak, 50 to 80 bits shows Fair, and 80 bits or more shows Strong.
With all four types ticked there are 87 possible characters, so 12 characters rates Fair and 13 or more rates Strong. Lowercase on its own needs at least 18 characters to reach Strong. The estimate assumes the password was picked at random, as it is here — it doesn’t apply to a password you made up yourself.
When a generated password is the right choice
- New accounts: give every site its own password so one leak can’t unlock the others.
- Replacing a reused password: swap out a password that appears on more than one account.
- Wi-Fi and devices: set a long router or admin password that nobody will guess.
- Test data: fill in password fields with realistic values while building a sign-up form.
Getting a password a site will accept
- Each character is picked independently, so a short password might not include every type you ticked. If a site insists on at least one number or symbol, check the result and regenerate if one is missing.
- Some sites reject certain symbols. Untick Symbols and add a few characters of length to keep a Strong rating.
- Unticking every box doesn’t produce an empty password — the tool switches Lowercase back on.
- There’s no option to leave out look-alike characters such as 0 and O, so take care if you need to type the password by hand.
Password Generator: common questions
Is it safe to generate a password online?
Here the password is created by code running in your browser and isn’t transmitted or saved. Once you close or regenerate it, it’s gone, so copy it somewhere safe first.
How long should my password be?
For an account protected by a password manager, 16 characters with all types is a comfortable default and rates Strong. Go longer if a site allows it and you never need to type it.
Which symbols can appear?
The Symbols option draws from ! @ # $ % ^ & * ( ) - _ = + [ ] { } ; : , . < > ?. Spaces, quotes, slashes and backslashes are never used.
Can I use this for passphrases?
No. It produces random characters, not words. For a memorable phrase you’d need a word-list generator.