Password Generator is a free tool that creates strong, random passwords. Choose the length and whether to include lowercase and uppercase letters, numbers and symbols, and see an estimate of the password’s strength. Passwords are created on your device using its secure random number generator; they are never sent over the internet or saved.
How to create a strong password
- Set the length. 16 characters or more is recommended.
- Choose which kinds of characters to include. At least one of each chosen kind is always used.
- Click Copy, and save the password in your password manager.
What makes a password strong
Length matters most. Each extra character multiplies the number of possible passwords, so a 20-character password of letters and numbers is far stronger than an 8-character one with symbols. The strength meter shows entropy in bits: below 50 is weak, 75 or more is strong, and 100 or more is very strong.
Good password habits
- Use a different password for every account, so one leak doesn’t unlock the others.
- Store them in a password manager instead of trying to remember them.
- Turn on two-factor authentication wherever you can.
- If a site rejects certain symbols, untick Symbols and increase the length instead.
How the passwords are generated
Every character is chosen with crypto.getRandomValues, the same secure randomness browsers use for encryption, using rejection sampling so no character is more likely than another. Nothing about the password leaves this page.
Websites should store passwords with a slow password hash such as Argon2id or bcrypt, never a fast hash like SHA-256 from the Hash Generator. For random identifiers rather than secrets, use the UUID Generator. To share a Wi-Fi password with guests without reading it out, put it in a Wi-Fi QR code.
Frequently asked questions
Are these passwords safe to use?
Yes. They are created inside your browser using its cryptographically secure random number generator, and never sent over the internet or stored.
How long should a password be?
At least 16 characters with a mix of character types, which rates as Strong or better. Use a password manager so you don’t have to remember them.
What do the bits mean?
Entropy in bits measures how many guesses an attacker would need: every extra bit doubles it. Above about 75 bits, guessing is impractical even for powerful attackers.
Why avoid look-alike characters?
Characters such as I, l and 1, or O and 0, are easy to mix up when you type a password by hand or read it aloud.
Last updated