Password Generator

Generate random passwords with a chosen length and character types, using your browser’s cryptographic random number generator.

Loading…

How to use

  1. Set Length with the slider or the number box (4–128 characters) and Count, the number of passwords to make (1–20).
  2. Tick the character types to use: A–Z, a–z, 0–9 and symbols (!@#$ and others). Every password contains at least one character of each ticked type.
  3. Tick Exclude look-alikes (Il1O0) to leave out I, l, 1, O and 0, which are easy to misread when typing a password by hand.
  4. Check Strength and the number of bits next to it; it updates as you change the length or character types.
  5. Press Copy (Copy all when there are several), or ↻ Regenerate for a new set with the same settings.

Frequently asked questions

How are the passwords generated?
With crypto.getRandomValues, the browser’s cryptographically secure random number generator. Each character is drawn uniformly (values that would cause modulo bias are discarded), and the characters are shuffled after one of each ticked type is placed.
How is the strength calculated?
Bits = length × log2(number of available characters). Below 40 bits is Weak, below 60 Fair, below 100 Strong, and 100 or more Very strong; for example, 16 characters drawn from all four types (89 characters) give about 104 bits. This is an upper bound: requiring one of each ticked type removes a little randomness, most noticeably in short passwords (4 characters from all types: shown 26 bits, actually about 22).
Does excluding look-alike characters make passwords weaker?
Only slightly: with all types ticked it removes 5 of 89 characters, about 0.08 bits per character, so a 16-character password drops from about 104 to 102 bits. Adding one character more than makes up for it.
How long should a password be?
At least 12–16 characters with mixed types for most accounts. Use a different password for every site and keep them in a password manager.
Are the passwords sent or stored anywhere?
No. They are generated in your browser, not sent to our server and not saved by this page; they are gone when you regenerate or close the page. A password you copy stays on your clipboard (and in clipboard history, if it is turned on).