Password Generator

Generate strong random passwords in your browser — adjustable length and character sets, with a live strength meter. Nothing is ever sent to a server.

Length 20

Include

a-z A-Z 0-9 !@#$% Exclude ambiguous (Il1O0)

How many

What makes a password strong?

Length beats complexity — every extra character multiplies the work an attacker must do.

A password's resistance to guessing is measured in bits of entropy — roughly length × log₂(alphabet size). A 20-character password drawn from upper- and lower-case letters plus digits carries about 119 bits, far beyond what any offline attacker can brute-force.

Length matters more than symbols. Each extra character multiplies the search space by the whole alphabet size, while adding a symbol set only widens it a little. Every password here is generated locally with your browser's cryptographic random source (crypto.getRandomValues, with rejection sampling so there's no modulo bias) — nothing is sent to or stored on a server.

Frequently asked

How long should my password be?

Length matters more than symbols — aim for at least 16 characters on important accounts. Every extra character multiplies an attacker's work far more than one more special symbol does.

Are these passwords safe to use?

Yes. They're generated in your browser with the cryptographic crypto.getRandomValues API and are never sent to or stored on any server.

Should I memorise these or use a manager?

Use a password manager — random passwords are strong precisely because they're not memorable. For one you must type from memory, a passphrase is easier.