The generator uses crypto.getRandomValues, the browser’s cryptographically secure random number generator, to build passwords of 6–64 characters or multi-word passphrases, and estimates strength in bits of entropy and time to crack.
How to create a strong password
- Set the length: 16 or more characters is recommended.
- Choose which character types to include, or switch to Passphrase.
- Press Copy and save it in your password manager.
What makes a password strong?
Length matters most. A random 16-character password using upper and lower case, digits and symbols has about 100 bits of entropy, far beyond what attackers can brute-force. Never reuse passwords across sites: one leak exposes every account that shares it.
Passphrases
Four or five random words, such as Wise-Coat-Harm-Fold-62, are easier to type and remember yet still strong. They are a good choice for your password manager’s master password and Wi-Fi.
Is it safe to use an online password generator?
This one never sends or stores passwords: they are created in your browser and disappear when you leave. You can even disconnect from the internet after the page loads and it keeps working.
Frequently asked questions
How long should my password be?
At least 12 characters, ideally 16 or more for important accounts like email and banking.
What does “bits of entropy” mean?
It measures unpredictability. Each extra bit doubles the guesses needed; 80+ bits is considered very strong.
Should I change passwords regularly?
Current NIST guidance says change them when there is evidence of compromise, not on a schedule. Use unique passwords and two-factor authentication.
Updated October 2026 · Built and tested by Sharjeel Tahir · How our tools are tested