Password generator
A new strong password is ready below. Adjust the length and characters, then copy it into your account.
Sealed on this device
Runs in your browser. Nothing is uploaded.
Sealed
Your new password Your new passwords
Choose at least one type of character.
- Strength
- —
- Entropy
- —
- Time to guess
- —
Average time for an attacker trying 10 billion guesses per second, which assumes a fast, poorly protected password database.
Generated on your device. This page doesn’t keep or send your passwords.
Settings
How it works
-
Set the length
Longer is stronger. 16 characters or more is a good choice for most accounts.
-
Pick the characters
Mix letters, numbers and symbols, unless a website restricts them. Each chosen type is always included.
-
Copy and save it
Copy the password into the website and into your password manager, so you never have to remember it.
Frequently asked questions
Are these passwords really random?
Yes. They come from your browser’s cryptographic random generator (crypto.getRandomValues), the same source used for encryption keys. Each character is drawn with rejection sampling, so no character is more likely than another.
Is the password sent to a server or saved?
No. The password is created by code running on your device. It is never transmitted, logged or stored by this page, and it disappears when you close or refresh it.
How long should my password be?
For an account protected by a password manager, 16 to 20 random characters is plenty. A random password of 16 characters using letters, numbers and symbols has around 100 bits of entropy, far beyond what can be guessed.
What does entropy mean?
Entropy measures how unpredictable a password is, in bits. Each extra bit doubles the number of guesses needed. The figure shown is exact for the settings you chose, including the rule that each selected character type appears at least once.
Why avoid look-alike characters?
Characters such as I, l, 1, O and 0 are easy to mix up when you read a password aloud or type it from paper. Removing them costs a little strength, which a slightly longer password makes up for.
Should I reuse a strong password?
No. Use a different password for every account, so a leak on one site can’t open the others. A password manager makes this easy.