Password generator — create strong random passwords

Using a different password for every site is the surest way to stay secure. Passwords are generated with no bias using a cryptographic random number generator, and are never stored or sent anywhere.

The file is never sent to a server — processed entirely in this browser

Length: 16 characters

Uppercase (A–Z) Lowercase (a–z) Numbers (0–9) Symbols

Exclude confusing characters (I, l, 1, O, 0, o, etc.) Allowed symbols Keep only the symbols the site allows. Count (1–20)

Very strong About 103 bits

87 character types × 16 characters · averages Over 1 trillion years even at 10 billion guesses per second

Under 40 bits is weak, under 60 is fair, under 80 is strong, 80+ is very strong. These levels assume a randomly generated password — a password a person comes up with is usually much weaker in practice.

Uses crypto.getRandomValues with rejection sampling so every character has an equal chance. At least one character from each selected type is guaranteed. Generated passwords are never stored or sent anywhere.

How to use Generate password

1Choose the length and the types of characters to include.
2Choose whether to exclude easily confused characters like 1 and l, or 0 and O.
3Click [Generate] and copy a password you like.

Frequently asked questions

How many characters makes a password safe?

If you use uppercase, lowercase, numbers, and symbols together, aim for 12+ characters, ideally 16+. Strength increases sharply with length.

Is the generated password saved?

No. It's generated in your browser and only shown on screen. Keep it in a password manager.

What about sites that don't allow symbols?

Turn off symbols, or enter only the symbols that site allows in the [Allowed symbols] field.