How to use the password generator
- Choose Password for a random string of characters or Passphrase for a set of random words.
- Adjust the length and character types. A new password is generated every time you change a setting.
- Press Copy, then paste it into the sign-up form or, better still, your password manager.
What makes a password strong
Strength comes from unpredictability, which is measured in bits of entropy. Each extra bit doubles the number of guesses an attacker would need. A random 16-character password that uses all four character types has about 100 bits, far beyond what anyone can guess. Length matters most: adding characters increases strength faster than adding more types of symbols.
The meter shows the entropy of your settings. That’s the right way to measure a randomly generated password, because it assumes an attacker knows exactly how the password was made.
Passwords versus passphrases
A passphrase like Lantern-Juggle-Frosty-Meadow42-Swirl-Comet is easier to type and remember than a string like h7#Qv!2pX@9m. Each word is drawn at random from a list of several hundred, so a six-word passphrase is strong enough for most accounts, and longer ones are stronger still. Use passphrases for the few passwords you have to type from memory, like your computer login or password manager, and let your password manager store long random passwords for everything else.
Private by design
Passwords are generated in your browser with the Web Crypto API. They’re never sent over the internet, logged, or saved by this site. When you leave or refresh the page, the password exists only where you pasted it.
Frequently asked questions
Is it safe to use an online password generator?
It’s safe when the password is created on your device, as it is here. This page generates passwords with your browser’s cryptographically secure random number generator and never transmits or stores them. After the page loads, it keeps working even if you go offline.
How long should my password be?
For most accounts, use at least 16 random characters or a passphrase of 6 or more words. For your email and password manager, consider going longer.
Why avoid look-alike characters?
Characters like a capital I, a lowercase l, and the number 1 are easy to confuse when you read a password aloud or type it from a printout. Leaving them out costs a tiny bit of strength, which you can make up by adding one more character.
What does bits of entropy mean?
It measures how many equally likely passwords the generator could have produced. 60 bits means about a billion billion possibilities, and every additional bit doubles that number.