Security

Password Generator

Generate strong, random passwords with full control over length and character types. 100% browser-based — passwords never stored or transmitted.

Password Length: 16

Uppercase (A–Z) Lowercase (a–z) Numbers (0–9) Symbols (!@#…) Exclude ambiguous (0O1l)

Generated Password

What Makes This Generator Secure

The password generator uses window.crypto.getRandomValues() — the browser's cryptographically secure pseudo-random number generator (CSPRNG). This is the same entropy source used by cryptographic software and is far more unpredictable than standard Math.random().

Password Strength Guide

Weak (under 10 chars, one type): vulnerable to brute force

Fair (10–12 chars, 2 types): adequate for low-risk accounts

Strong (14–16 chars, 3+ types): recommended minimum

Very Strong (20+ chars, all types): use for critical accounts

Best Practices

Use a unique password for every account — never reuse passwords.
Store passwords in a reputable password manager (Bitwarden, 1Password, etc.).
Enable two-factor authentication wherever available.
Use 16+ character passwords for email, banking, and cloud storage accounts.

How to Use the Password Generator

A password is generated as soon as the page loads. Use the slider to choose a length from 8 to 64 characters, tick the character types you want, and click Generate New Password for a fresh one. Click Copy password to put it on your clipboard. The options update the password straight away.

The Options

Uppercase, lowercase, numbers and symbols: tick any combination. The password is guaranteed to contain at least one character from each type you select.
Exclude ambiguous: removes the characters 0, O, 1 and l, which are easy to confuse when you read a password aloud or type it from paper.
You must select at least one type, otherwise the tool asks you to choose one.

Understanding the Strength Meter

The meter estimates strength in bits of entropy, calculated as the length multiplied by the base-2 logarithm of the number of possible characters. Higher is better. The labels are Weak (under 40 bits), Fair (40 to 59), Strong (60 to 79) and Very Strong (80 or more). Some examples:

8 lowercase letters: about 37.6 bits → Weak

12 letters and digits: about 71.5 bits → Strong

16 characters, all four types: about 103.6 bits → Very Strong

This is a theoretical figure for a password chosen at random. It cannot account for how a site stores your password, whether you reuse it, or whether it has been exposed in a data breach.

Using Passwords Safely

Make every password unique. Reuse is the biggest risk, because one breached site exposes every account sharing that password.
Use a password manager to store long random passwords, rather than writing them in a notes file or an email.
Prefer length. If a site allows it, 16 characters or more is a sensible default. Some sites limit symbols, so untick that option if a password is rejected.
Turn on two-factor authentication where it is offered, for important accounts such as email and banking.

Passwords are created in your own browser using its built-in random number generator, and they are never sent anywhere or saved by this site.

Frequently Asked Questions

Are passwords generated by this tool stored anywhere?

No. The password generator runs entirely within your browser using JavaScript. Generated passwords never leave your device, are never sent to any server, and are never logged or stored. The moment you close the tab, they are gone.

What makes a password strong?

A strong password is long (16+ characters), uses a mix of uppercase letters, lowercase letters, numbers, and symbols, avoids common dictionary words, and is unique (not reused across accounts). This tool gives you all of these by default.

How often should I change my passwords?

Security guidance has evolved. Current best practice (NIST guidelines) recommends changing passwords only when there is reason to believe they may have been compromised, rather than on a fixed schedule. The most important thing is to use unique, strong passwords and a password manager.

Should I use a password manager?

Yes. A password manager allows you to use a unique, complex password for every account without needing to remember them all. You only need to remember one strong master password. This is the single most impactful step you can take to improve your online security.

Can I make a password without symbols?

Yes. Untick the Symbols option and a new password is generated straight away using only the character types you have left selected. This is useful for sites that do not accept special characters.

What does the Exclude ambiguous option remove?

It removes the characters 0, O, 1 and l so that passwords are easier to read aloud or copy by hand.

Related Tools

Learn what makes a password truly strong and why browser-based generation is the safest approach.

Read the full guide →