Password Generator
Most passwords people choose themselves are far weaker than they look. A pet's name, a birthday, or a favourite word followed by a single number can be guessed in seconds by software that tries thousands of combinations, and the same few passwords turn up in breach after breach. The fix is not to memorise something cleverer, but to stop choosing passwords at all and let a generator create a truly random one instead. This free password generator builds strong, random passwords in your browser in one click. Choose a length, pick which character sets to include — uppercase letters, lowercase letters, numbers, and symbols — and generate a password that no dictionary, name list, or pattern can predict. Every password is created with your browser's built-in cryptographic random number generator, so the result is genuinely unpredictable rather than merely shuffled. Nothing is uploaded, stored, or sent anywhere, and you can copy the result straight into a password manager or a sign-up form.
Your Generated Password
—
How to Use This Password Generator
- Choose a length. Sixteen characters is a good default for most accounts. Use 20 or more for email, banking, and your password manager itself.
- Pick your character sets. Keep all four boxes ticked when the site allows it. If a site rejects symbols, untick symbols and add a few extra characters of length instead.
- Tick "exclude ambiguous characters" only if you will type the password by hand or read it aloud. It makes the password easier to read, at a small cost in strength.
- Tap Generate Password, then Copy Password and paste it into the site or your password manager. Generate a new one for every account — never reuse a password.
What Makes a Password Strong?
Password strength comes down to two things: length and randomness. Each character in a password is a guess an attacker must make, and the more possible characters there are, the harder each guess becomes. Security experts measure this as entropy, counted in bits. A password drawn from lowercase letters alone gives about 4.7 bits per character, because there are only 26 possibilities. Add uppercase letters, numbers, and symbols and the pool grows to 94 characters, worth about 6.55 bits per character. That is why a 16-character password from all four sets has roughly 105 bits of entropy — far beyond what any realistic guessing attack can reach. Randomness matters just as much. A password built from words, names, dates, or keyboard patterns is weak no matter how long it is, because attackers try those patterns first. A generated password has no pattern to exploit, which is exactly why it is strong.
Password Safety Tips
Generating a strong password is only the first step. Use a password manager to store a different password for every account, so a breach at one site cannot spread to the others. Turn on two-factor authentication wherever it is offered, especially for email, because your email account can reset almost every other account you own. Change a password immediately if a service tells you it has been breached, and never share a password by email or chat. Finally, remember that a password you cannot remember is a good sign: it means it is random enough to be strong. Let the password manager remember it for you.
Worked Example
Suppose you need a new password for an email account. You set the length to 16, tick all four character sets, and leave "exclude ambiguous characters" unticked. The generator draws 16 characters at random from the full 94-character pool, and might produce K7$mQ9vL2#xR8wT4 — a password that contains uppercase letters, lowercase letters, numbers, and symbols. Its estimated entropy is 16 × log2(94) ≈ 105 bits, which earns a "Very strong" rating. You copy it into your password manager, save it under the email account, and never reuse it anywhere else. If the same site later asks for a password you must type by hand, you would tick "exclude ambiguous characters" and generate again, accepting a slightly lower entropy of about 103 bits in exchange for characters that cannot be confused with each other.
Frequently Asked Questions
How long should a strong password be?
Use at least 16 characters for important accounts such as email, banking, and password managers. A 16-character password drawn from all four character sets has about 105 bits of entropy, which makes guessing it impractical. Shorter passwords are much easier to crack, so length is the single most effective improvement you can make.
Is this password generator safe to use?
Yes. This generator runs entirely in your browser using the Web Crypto API, and it never sends, uploads, or stores your passwords. Nothing leaves your device, and no password is saved on our servers, because there are no servers involved in the generation step at all.
Should I use symbols in my password?
Yes, when the site allows them. Symbols add 32 extra characters to the pool an attacker must guess from, which raises the entropy of every character. If a site rejects symbols, use a longer password made from letters and numbers instead, and never reuse the same password on two sites.
What are ambiguous characters, and should I exclude them?
Ambiguous characters are ones that look alike, such as lowercase l, the number 1, uppercase I, uppercase O, the number 0, and lowercase o. Exclude them when you need to read a password aloud or type it from a printed page. Keep them in when you will copy and paste, because they slightly increase the password's strength.
Can I reuse a generated password on more than one site?
No. Generate a different password for every account, even a strong one. If one site is breached, attackers try the stolen password on other sites, so reuse turns one breach into many. A password manager can store a unique generated password for each account so you only have to remember one master password.