How to use the Password Generator
- Set the length (16+ recommended) and character types
- Click Generate, or let it refresh as you change options
- Copy the password into your password manager
About this tool
Passwords are generated with crypto.getRandomValues(), the browser’s cryptographically secure random number generator, using rejection sampling so every character is equally likely. Each password is guaranteed to include at least one character from every set you select. Nothing is logged, stored or sent. You can generate passwords offline after the page loads.
The strength meter estimates entropy in bits (length × log₂ of the character pool). Crack time assumes an offline attack at 10 billion guesses per second. A random 16-character password using all four sets has about 105 bits, which is far beyond brute force.
Frequently asked questions
How long should my password be?
At least 12 characters for everyday accounts, and 16 or more for email, banking and your password manager. Length matters more than symbols.
Is it safe to generate passwords online?
It is safe here because generation happens entirely in your browser, with no network requests. Still, use a password manager to store passwords, not a text file.
What are ambiguous characters?
Characters that look alike, such as l, 1, I, O, 0 and o. Excluding them helps when you have to read or type a password by hand.
Password or passphrase?
Use random passwords for anything stored in a password manager. Use a passphrase for the few you must memorize, like the manager’s master password.
Related tools
Updated · Built and maintained by the UtilityBright team · About our tools · Report a problem