Strong Password Generator: Random Passwords and Passphrases

What this tool does

The Password Generator makes random passwords and passphrases on your own device. Choose a length from 8 to 64 characters and which character types to include, or switch to a passphrase of random words. Each result shows its strength in bits of entropy and a rough time an attacker would need to guess it, and a copy button sits next to every password.

Randomness comes from your browser's Web Crypto API, the same source browsers use for encryption keys. Values are picked without modulo bias, so no character is more likely than another.

How to generate a strong password

1. Choose Password or Passphrase.
2. Set the length, or the number of words.
3. Pick the character types. Keep Avoid look-alike characters on if you will ever type the password by hand.
4. Choose how many to make: 1, 5 or 10.
5. Press Copy next to the one you like and paste it into the sign-up form or your password manager.

When it helps

• Signing up for a new account.
• Replacing a password that was reused on several sites.
• Creating a Wi-Fi password, then sharing it as a Wi-Fi QR code.
• Choosing a password before you lock a PDF.

What we found in testing

A batch of 10 passwords at the default settings were all 20 characters long, each contained capital letters, small letters, digits and symbols, none contained the look-alike characters I, l, 1, O or 0, and no two were the same. Passphrase mode produced five words joined by hyphens.

The tool does not store anything. Closing or refreshing the tab clears every password on the screen.

Tips

• Use a password manager so every account can have its own long password.
• 16 or more random characters, or 5 or more random words, is a good minimum for accounts that matter.
• If a site rejects a symbol, untick symbols and add a few characters of length instead.

Frequently asked questions

Are generated passwords saved or sent anywhere?

No. They are made in your browser tab and disappear when you close it.

What does "bits" mean?

Bits of entropy measure how many guesses a password could take. Every extra bit doubles the work. Around 80 bits or more is very strong.

Is a passphrase as safe as a random password?

Yes, when the words are chosen at random and there are enough of them. Five random words with a number is roughly as strong as a 13-character random password, and much easier to type.

Why does a site say my password is too long?

Some sites limit length. Lower the slider to the site's maximum.

Should I use the same strong password everywhere?

No. If one site leaks it, every account using it is exposed. Make a new one for each account.