Password Generator

Free secure password generator — cryptographically random, no modulo bias, and it guarantees one of every character type you pick. Real entropy and crack-time, ambiguous-character exclusion, batch generation, and a memorable passphrase mode.

Password Generator — Create Strong, Unique Passwords Instantly

Weak passwords are the number one cause of account breaches. "password123" and your pet's name are not protecting anything. A strong password needs to be long, random, and unique for every account. But humans are terrible at creating randomness — we default to patterns, dictionary words, and predictable substitutions.

This generator uses your browser's cryptographically secure random source, with the extra care that makes the difference: it removes the small statistical bias most generators leave in, and it guarantees that a password actually contains one of every character type you asked for. Choose a length, pick the character types, or switch to a memorable passphrase — and see the real strength, not a guess.

What actually makes a generator trustworthy

Cryptographic randomness, done right. It uses crypto.getRandomValues — never Math.random() — and if a secure source is somehow unavailable it refuses to run rather than quietly producing a weak password.
No modulo bias. Mapping raw random numbers onto a character set with a plain remainder makes some characters slightly more likely. This uses rejection sampling, so every character is exactly equally likely.
Every selected type is guaranteed. If you require symbols, the password will contain a symbol — placed at a random position by a secure shuffle. A generator that merely picks from a combined pool leaves roughly a 1-in-16 chance of no symbol at length 8, and many sites reject those.
Honest strength. The meter shows real entropy — length × log₂(pool size) — and an estimated time to crack at 100 billion guesses a second, not a colour based on a hunch.
Nothing leaves your device. Every password is generated locally in your browser. None is sent, logged, or stored — ever.

How to Generate a Strong Password

Set your requirements and the generator creates a random password that meets them. Copy and save to your password manager.

1. Set Length

Choose a password length from 8 to 128 characters. 16+ characters is recommended for strong security.

2. Choose Character Types

Include or exclude uppercase letters, lowercase letters, numbers, and special symbols based on the site's requirements.

3. Generate

A cryptographically random password is generated instantly. A strength meter shows the estimated crack time.

4. Copy and Save

Copy the password with one click and store it in your password manager. Generate a new one anytime you need it.

Passwords are generated entirely in your browser. Nothing is sent to any server. Your passwords are never seen, stored, or logged.

Why Use a Password Generator

Unbiased Cryptographic Randomness

Your browser's crypto.getRandomValues, mapped to the character set with rejection sampling so there is no modulo bias — every character is exactly equally likely.

Every Type Guaranteed

Ask for symbols and you get a symbol — placed at a random position by a secure shuffle. No more rejected passwords because a required character class happened to be missing.

Real Entropy & Crack Time

The meter shows true entropy in bits and an estimated time to crack. An 8-character mix falls in hours; a 12-character one lasts centuries; a 16-character one is effectively uncrackable.

Memorable Passphrases

Switch to passphrase mode for diceware-style word combinations like Nest-Love-Hair-Photo-Sun — easy to type and remember, and still 50+ bits strong.

Exclude Ambiguous Characters

Optionally exclude 0/O, 1/l/I and other characters that are hard to distinguish in certain fonts.

Batch Generation

Generate multiple unique passwords at once. Useful when setting up accounts for a team or resetting multiple services.

Works on Any Device

Generate passwords on your phone, tablet, or laptop. No app installation needed — works in any browser.

100% Private

Generated locally in your browser. No passwords are transmitted, logged, or stored anywhere. Ever.

Password Generator — FAQs

12 characters is the minimum recommended length. 16 or more characters with mixed types (upper, lower, numbers, symbols) provides strong security against brute-force attacks. Longer is always better.

Yes, as long as the generator runs locally in your browser. Our tool uses JavaScript's Web Crypto API to generate passwords entirely on your device. No password data is ever sent to a server.

Absolutely. If one account is breached, reused passwords let attackers access all your other accounts. Use a unique generated password for each service and store them in a password manager.

Both are strong if they are long enough; the difference is where you use them. A random character string like ZO#,g7frO7dyr+gwz is best stored in a password manager — you never type it. A passphrase like Nest-Love-Hair-Photo-Sun is far easier to type and remember, which makes it ideal for the few passwords you must key in by hand: your device login, your password-manager master password, your Wi-Fi. Five words from this tool's list is about 54 bits; six words is 64 bits, comfortably strong. Add a word or a number if a site demands digits.

Entropy measures how many equally likely passwords could have been produced, on a log scale: each extra bit doubles the number of guesses an attacker must try. It is length × log₂(pool size) — so a 16-character password from a 90-character set is about 104 bits, meaning 2¹⁰⁴ possibilities. The crack-time estimate assumes a well-funded offline attacker trying 100 billion guesses a second against a fast hash; on that basis an 8-character mix falls in hours, a 12-character one in a few centuries, and a 16-character one takes longer than the age of the universe. Length matters far more than adding symbols — every extra character multiplies the work.

Yes, completely free. No signup, no tracking, no limits.

Generated batch

Related tools