Password Generator Overview
Most people are not good at inventing passwords. We reach for pet names, birthdays and keyboard patterns, because those are easy to remember, and for exactly the same reason they are easy for someone else to guess. A password generator removes the human habits from the process. You choose the length and the kinds of characters, and the tool builds a password from your browser’s secure random number source.
The password is created on your device, shown on screen, and never stored or sent anywhere by this page. Beside it you will see an entropy score, a strength label and a plain-language estimate of how hard the password would be to guess.
What Is a Strong Password?
A strong password has two qualities. It is long, because each extra character multiplies the number of possibilities an attacker has to try. And it is unpredictable, because a long password built from a phrase, a name or a pattern can still be guessed by a program that tries common patterns first.
That is why modern advice has shifted away from “add a capital letter and a symbol” and towards “make it long, make it random, and never reuse it”. Adding a single symbol to a predictable word helps very little. Adding several truly random characters helps a great deal.
The score on this page is entropy, measured in bits. It is calculated as the password length multiplied by the base-2 logarithm of the size of the character pool you selected. Each extra bit doubles the number of guesses needed. As a rough guide, this tool labels under 40 bits as weak, 40 to 59 as fair, 60 to 79 as good, 80 to 99 as strong and 100 or more as very strong. The result is an estimate that assumes an attacker knows your settings, not a promise that any password can never be broken.
The quality of the randomness matters too. This generator uses the browser’s cryptographic random source, crypto.getRandomValues, instead of the ordinary random function used for games and animations, whose output can be predictable if its internal state is known.
Password Generator Features
- Length from 4 to 128. Drag the slider or type a number. Both stay in sync, and a new password is created as you adjust them.
- Four character sets. Uppercase letters, lowercase letters, numbers and symbols can each be switched on or off. At least one must stay selected.
- Exclude look-alikes. One option removes the characters 0, O, o, 1, l and I, which are easy to confuse when you read or type a password by hand.
- Every chosen set is represented. The generator places at least one character from each selected set, fills the rest from the whole pool, then shuffles with the same secure random source so the pattern is not obvious.
- Unbiased selection. Characters are chosen by rejection sampling, which avoids the small statistical skew that a simple remainder calculation can introduce.
- One to ten passwords at a time. Choose how many you need, and copy any of them individually.
- Entropy, strength and a time estimate. See the bit score, a label with text (not just colour), and an estimated time to guess at ten billion attempts per second.
- Copy with confirmation. The copy button changes to a tick and a message confirms it, or explains if your browser blocked clipboard access.
- Safe failure. If a browser lacks the secure random source, the page says so and does not create a password rather than quietly using something weaker.
Benefits of Using a Password Generator
- Nothing to remember. Pair it with a password manager and you only need to recall one master password.
- Unique passwords are easy. A different password for every account limits the damage if one site is breached.
- No hidden pattern. Random output has no birthday, pet name or keyboard walk for an attacker to exploit.
- You stay in control. If a website rejects symbols or demands a minimum length, change the options and generate again.
- Private and free. There is no sign-up, no limit on how many you create, and this page does not store what it generates.
Who Can Use a Password Generator?
Anyone opening a new account, or replacing a password that may have appeared in a data breach, can use it to get something they would never have thought of themselves. It is just as useful for people who hand credentials to others: a developer setting up a test account, an administrator issuing a temporary password, or a small business owner setting up a shared Wi-Fi or router login. Parents helping relatives tidy up their accounts will find the look-alike option handy for passwords that have to be read aloud or typed from paper.
How to Generate a Password
- Set the length. Sixteen characters is a sensible starting point for most accounts. Go longer for a password manager master password, email or banking.
- Pick your character sets. Keep all four on if the site allows them. If a site rejects symbols, turn them off and add length instead; the entropy score shows what you gained and lost.
- Consider look-alikes. Turn on “Exclude look-alikes” if you will ever need to type the password from a screen or a printout.
- Generate and review. Press the refresh icon or “Generate password” for a new one, and check the strength label.
- Copy it straight into your password manager or the sign-up form. Do not email it to yourself or keep it in a plain note.
While you are here, you might also like the Case Converter & Word Counter and the Free QR Code Generator.
Frequently Asked Questions
Is it safe to generate a password on this page?
The password is created by your own browser using its secure random source, and this page does not store it or send it anywhere. As with any password, you should still keep it somewhere safe, such as a reputable password manager.
Should I use symbols in every password?
Symbols enlarge the pool of possible characters, which helps, but length matters more. If a site rejects symbols, a longer password made of letters and numbers can be just as strong. The entropy score lets you compare the two.
How long should my password be?
For ordinary accounts, 16 characters of random text is a solid choice. For your password manager, your email account or anything that protects money, consider 20 characters or more, if the site allows it.
What does “exclude look-alikes” do?
It removes characters that are easy to mistake for each other: zero and the letter O, one, a lowercase L and a capital I. This is useful if you will read the password aloud or type it by hand. It slightly reduces the pool, so the entropy score may drop a little; add a character or two to compensate.
Should I try to remember the passwords it makes?
For most accounts, no. Store them in a password manager and let it fill them in. Memorise only the master password for the manager itself, and make that one long.
Does this page store or log the passwords it creates?
No. Passwords are generated in your browser and exist only on your screen until you copy or close the page. They are not placed in the address bar, saved in cookies or sent to a server by this tool.
Can I reuse the same password on several sites?
It is best not to. If one site is breached, attackers try the leaked password on other services. A unique password for every account contains the damage.
Conclusion
A good password is long, random and used in one place only. This generator takes care of the first two, and a password manager takes care of the third. Set your length, copy the result and move on with your day.
