Strong Password Generator

Create hard-to-guess passwords for email, banking apps, Wi-Fi and work accounts.

Passwords

How to use

  1. Choose the length (16 or more is a good default).
  2. Pick the character types and, if you type passwords by hand, avoid look-alikes.
  3. Copy one password into your password manager; press "Generate again" for more.

Good to know

Passwords are made with crypto.getRandomValues, the browser's cryptographic random generator, and each character is chosen without bias. Every type you tick (A–Z, a–z, 0–9, symbols) appears at least once, which many websites require.

Strength is shown as entropy: length × log2(number of possible characters). A 16-character password from all 94 types has about 105 bits, far beyond guessing. Under 40 bits is weak, 60–80 strong, above 80 very strong. These numbers assume the password is random, as it is here; human-made passwords are much weaker than their length suggests.

Use a different password for every account and keep them in a password manager. Turn on two-factor authentication (OTP or an authenticator app) for email and banking. Some banking sites limit symbols; if a password is refused, switch symbols off and use a longer length instead.

Questions

Are these passwords stored anywhere?

No. They are created in your browser and disappear when you close the page.

How long should my password be?

At least 12 characters; 16 or more for important accounts.

What are look-alike characters?

O and 0, I, l and 1 look similar. Avoid them if you will type or read the password aloud.

Is a symbol required?

Length matters more. Use symbols if the site allows them.

Can I generate many at once?

Yes, up to 50 at a time.

Last updated: