Password Generator – Create Strong Random Passwords
About Password Generator
Generate a strong random password of any length, with control over which character sets are used and the option to leave out characters that are easy to confuse.
A strong password is long and unpredictable. Length matters more than exotic symbols: a longer password built from a bigger character set takes far more work to crack than a short one with substitutions like a 3 for an e, which attackers have accounted for since the 1990s.
Passwords here are generated in your browser and never transmitted. That is the only safe way to do this — a generator that creates your password on a server has, by definition, seen it. The strength meter updates as you change the settings so you can see the effect of adding length or another character set.
What you can use it for
- Create a unique password for a new account instead of reusing an old one.
- Replace a password that has appeared in a data breach.
- Generate a password that satisfies a site's specific character requirements.
- Produce a password free of lookalike characters when it has to be typed or read aloud.
- Create a strong master password for a password manager.
How it works, step by step
- 1
Set the length
Longer is stronger. Aim for at least 16 characters where the site allows it.
- 2
Choose character sets
Include uppercase, lowercase, numbers and symbols as the site permits.
- 3
Exclude lookalikes if needed
Leave out characters like l, I, 1, O and 0 if the password will be typed by hand or read out.
- 4
Copy and store it
Copy the password and save it in a password manager — do not try to memorise a random string.
Frequently asked questions
How long should a password be?
At least 16 characters for anything that matters, and longer where allowed. Length contributes more to strength than complexity rules do.
Is my password sent to a server?
No. It is generated in your browser using the operating system's cryptographic random source and is never transmitted, logged or stored by us.
Are these passwords truly random?
They use the browser's cryptographically secure random generator, which is the same class of source used for encryption keys — not the ordinary predictable random function.
Should I use symbols?
They help, but adding four more characters of length usually helps more. Some systems restrict which symbols are allowed, which is why the character sets are configurable.
How should I store a generated password?
In a password manager. A truly random password is not memorable by design — that is what makes it strong, and a manager is what makes it practical.