Generate strong, random passwords.
Create secure passwords, easy-to-type passphrases or PINs in one click. Built with your browser's cryptographic random numbers, so nothing is ever sent or stored.
Runs in your browserNothing uploaded or storedFree, no sign-up
Your password
–
Created in your browser with secure random numbers. Never sent anywhere.
Test a password you already use
Get a quick strength estimate. What you type is checked on this page only and never leaves your device.
–
How to stay safe online
Length beats complexity
Every extra character multiplies the work for an attacker. A 20-character password is far stronger than an 8-character one full of symbols.
One password per site
If a reused password leaks from one site, attackers try it everywhere else. Generate a fresh one for every account.
Use a password manager
Nobody can remember dozens of random passwords. A manager stores them securely and fills them in for you.
Turn on two-factor sign-in
An authenticator app or security key protects an account even if the password is stolen. Use it on email and banking first.
Questions people ask
How secure is this password generator?
Passwords are made in your browser with the Web Crypto random number generator (crypto.getRandomValues), the same source browsers use for security keys. Values are picked without bias, and nothing is sent to a server, so we never see your password.
How long should my password be?
At least 16 characters for important accounts. With all four character types, 16 characters gives roughly 100 bits of strength, which is out of reach of any realistic attack. Longer is always better, and a password manager means you never have to type it.
What is a passphrase and when should I use it?
A passphrase is several random words joined together, like “Maple-Rocket-Lantern-Cobweb-Quilt-Meadow-Tulip”. It is much easier to type and remember than random symbols. Use 7 or more words for strong protection, for example for a password manager's master password. Because each word comes from a list of a few hundred, every word adds about 9 bits, so more words matter more than fancy symbols.
What does the strength meter mean?
It shows entropy in bits, a measure of how many guesses an attacker would need. Every extra bit doubles the work. The crack-time figure assumes an offline attack at 10 billion guesses per second and the attacker finding the password halfway through the search.
Why skip look-alike characters?
Characters such as I, l, 1, O and 0 are easy to confuse when you read a password aloud or type it by hand. Skipping them barely lowers strength but avoids typing mistakes.
Is the password tester safe to use?
The test runs locally on this page and nothing is uploaded. Even so, it is wise to test a similar password, not one you use for a real account, and to remember that the result is only an estimate.