It uses the browser's built-in Web Crypto API (crypto.getRandomValues) to generate cryptographically secure random passwords. Nothing is sent to any server.
A strong password is long (16+ characters), uses a mix of uppercase, lowercase, numbers, and symbols, and is unique for each site. Our entropy score shows how strong your password is.
A passphrase is a series of random words (e.g. 'correct-horse-battery-staple') that is easier to memorize but still very strong due to its length.
Passwords are only kept in your browser's localStorage for the history feature. They are never sent to any server.
At least 16 characters for regular accounts, and 20+ for sensitive accounts like banking or email. Longer passwords with mixed character types are exponentially harder to crack than short complex ones.
Entropy measures how unpredictable a password is, expressed in bits. A 128-bit entropy password would take trillions of years to crack by brute force. The entropy meter on this tool updates live as you adjust settings.
No — they are intentionally too complex to memorize. Use a password manager like Bitwarden, 1Password, or KeePass to store them securely. The manager only needs one strong master password that you memorize.
Weak or reused passwords are the leading cause of account compromise. This generator uses your browser's built-in cryptographic random number generator (the same technology securing HTTPS) to produce passwords that are genuinely unpredictable.
Choose password or passphrase mode
Password mode creates a random character string — best for most logins. Passphrase mode generates a sequence of random words that is easier to type and remember while still being very strong.
Set length and character set
16+ characters with uppercase, lowercase, numbers, and symbols gives an entropy score that makes brute-force attacks computationally infeasible. Watch the entropy meter update as you adjust settings.
Use advanced options if needed
Enable 'Exclude ambiguous characters' to remove easily-confused chars (O, 0, l, 1, I) for passwords you need to type manually. Use 'Require at least 1 number/symbol' to satisfy strict platform policies.
Copy or scan to fill
Copy the password directly to clipboard, or scan the auto-generated QR code on your phone to fill the password on a mobile form without retyping.
Create unique passwords per account
Using the same password across multiple sites means one breach exposes all your accounts. Generate a new unique password for every signup and store it in a password manager.
Meet corporate password policies
Many organizations require passwords with specific rules (min 12 characters, 1 uppercase, 1 symbol). Dial in the exact character set requirements to produce a compliant password on the first try.
Generate API keys and tokens
Need a random secret for an API key, session token, or encryption key? A 32+ character password with all character types makes a strong base secret for development use.
A strong password is one that is long, random, and unique. This generator creates passwords using your browser's built-in cryptographically secure random number generator (crypto.getRandomValues), the same source of entropy used by your operating system for cryptographic keys — not a pseudo-random function that can be predicted if the seed is known.
Configure the length (8–128 characters), choose which character sets to include (uppercase, lowercase, digits, symbols), or switch to passphrase mode to generate memorable word-combination passwords. The entropy meter shows how many bits of randomness your password contains — 80+ bits is sufficient for most purposes; 128+ bits is considered computationally unbreakable with current hardware. Nothing you type or generate is sent anywhere.