About this password generator
Password Generator
A password generator creates strong, random passwords you can use for new accounts instead of reusing a weak one. Set the length, pick which character types to include, and the tool produces a password instantly — every character drawn from a cryptographically secure random source in your browser.
How to use it
- Set the Length slider — 16 characters is a solid default for important accounts.
- Tick the character sets to include: Uppercase (A–Z), Lowercase (a–z), Numbers (0–9), Symbols.
- Click Generate password to create a fresh random password.
- Check the Entropy readout, then click Copy to copy the password to your clipboard.
The method behind it
Frequently asked questions
Is it safe to generate passwords in a browser?
Yes, when the generation happens locally, as it does here. Each character is drawn from the browser's cryptographic random number generator, and the password never leaves your device — it is not sent to a server, stored, or logged. The main risk with any password tool is a compromised page or a shoulder-surfer, so generate on a device you trust and save the result in a password manager rather than a notes file.
How long should my password be?
Use at least 16 random characters for important accounts (email, banking, code hosting) and 12 or more for everything else. Length matters more than clever substitutions: each extra random character multiplies the guessing space. If a site caps length, max it out and enable every character type allowed. For a master password you must memorize, a multi-word passphrase is easier to remember than a random string of the same strength.
What is password entropy?
Entropy measures unpredictability in bits. A password with 80 bits of entropy has 2^80 possible values — an attacker guessing at random would need to try half of them on average. The tool computes it as length × log₂(character-set size). Anything above 70 bits is strong against offline guessing; above 100 bits is effectively unbreakable with current technology.
Can I exclude ambiguous characters?
Yes. The generator has an option to drop lookalike characters such as O/0 and l/1/I, which helps when you must read or type a password manually. Note that excluding characters shrinks the pool slightly, so the entropy readout dips a little — add one extra character of length to compensate.
Should I use a different password for every site?
Yes — that is the entire point of a generator. Reusing one strong password means a single breach hands attackers the key to every account. Generate a unique password per site, store them in a password manager, and you only ever need to remember the manager's own master password.
Worked example
Settings: length 16, all four character sets on. The pool is 26 lowercase + 26 uppercase + 10 digits + 32 symbols = 94 symbols.
- log₂(94) ≈ 6.5546 bits per character
- entropy = 16 × 6.5546 ≈ 104.87 bits, shown as ~105 bits
That is roughly 2^105 possible passwords — far beyond brute force. For comparison, a 12-character password using only letters and digits (N = 62): log₂(62) ≈ 5.9542, so entropy = 12 × 5.9542 ≈ 71.45 bits (~71 bits). Shortening the password or shrinking the character set visibly drops the entropy readout, which is why the tool shows the number live as you change settings. This is the same reasoning behind NIST SP 800-63B, which recommends randomly generated secrets over passwords people invent themselves.