Generated passwords
Generated with your browser's cryptographically secure random number generator (Web Crypto). Passwords are never sent anywhere.
Long, random, unique passwords are the best defence against account takeovers. Generate them here with true cryptographic randomness — nothing ever leaves your device.
How to use the Password Generator
- 1 Set the length with the slider (16+ characters recommended).
- 2 Choose the character types and exclusions you need.
- 3 Copy a password — or generate a batch and copy them all.
Formula
Entropy (bits) = length × log₂(pool size) Crack time ≈ 2^entropy ÷ 2 ÷ 10¹⁰ guesses per second
Worked examples
Input: 20 characters, all sets
Result: ≈ 130 bits of entropy
Practically uncrackable by brute force
What makes a password strong?
Length matters most. Each extra character multiplies the number of possible passwords by the size of the character pool. A random 16-character password with letters, digits and symbols has over 100 bits of entropy — far beyond any brute-force attack.
How the strength meter works
Entropy measures unpredictability: length × log₂(pool size). The crack-time estimate assumes an attacker making ten billion guesses per second against a fast hash. These figures assume the password is truly random — which it is here, because it is generated with crypto.getRandomValues and unbiased rejection sampling.
Best practices
- Use a unique password for every account and keep them in a password manager.
- Turn on two-factor authentication wherever possible.
- Exclude look-alike characters if you need to type the password by hand.
Frequently asked questions
Is it safe to generate passwords online?
Here, yes: passwords are generated locally by your browser's cryptographic random generator and are never transmitted or stored.
How long should my password be?
At least 12 characters; 16 or more for important accounts. Longer is always stronger.
Why exclude ambiguous characters?
Characters like l, 1, I, O and 0 are easy to confuse when reading or typing a password by hand.
Related tools
JSON Formatter & Validator
Format, beautify, minify and validate JSON with syntax highlighting, key sorting and precise error locations.
Base64 Encoder
Encode text to Base64 (UTF-8 safe), with URL-safe and MIME line-wrapping options.
Base64 Decoder
Decode Base64 and URL-safe Base64 back to UTF-8 text, with clear errors for invalid input.
URL Encoder / Decoder
Percent-encode or decode URLs and query parameters, as a component or a full URI.
HTML Entity Encoder / Decoder
HTML entity encoder and decoder: escape special characters to entities, or decode named and numeric entities back to text.
Regex Tester
Regex tester for JavaScript regular expressions: live match highlighting, capture groups and replace preview.