How to use the password generator
Choose a length and the character types you want, then press Generate password. Every press creates a new password, and the copy button puts it straight on your clipboard. The generator guarantees at least one character from each type you select, then shuffles the result so those characters are not in predictable positions. Turn on "Avoid look-alikes" if you'll need to read or type the password by hand.
Is it safe?
Yes. Passwords are created by JavaScript running on your own device using the Web Crypto API, a cryptographically secure random source. Nothing is transmitted to our server, stored or logged. You can even disconnect from the internet after the page loads and it will keep working.
What makes a password strong?
Strength is measured in bits of entropy – roughly, how many guesses an attacker would need. Entropy grows with both length and the size of the character pool:
A 16-character password using all four character types has about 100 bits of entropy, far beyond the reach of brute-force attacks. Length adds strength faster than complexity, so a longer password is usually the easiest win.
Password best practices
- Use a unique password for every account. Reused passwords are the main way breaches spread from one site to another.
- Store passwords in a password manager rather than in notes or browser text files.
- Turn on two-factor authentication wherever it is offered.
- Use at least 12–16 characters for important accounts, and longer for password-manager master passwords.
- Change a password immediately if a service you use reports a breach.
Avoid personal information such as names, birthdays or pet names, and never share passwords by email or chat.
Passphrases as an alternative
For passwords you need to memorize – such as the master password for a password manager or your computer login – a passphrase made of four to six random, unrelated words can be both strong and easy to remember. Random means truly random, not a famous quote or song lyric. For every other account, let a password manager store a long random password generated here.
Frequently asked questions
Are the generated passwords stored anywhere?
No. They are created in your browser and never sent to or saved on our server.
How long should a password be?
At least 12 characters for everyday accounts and 16 or more for important ones such as email, banking and your password manager.
Are symbols necessary?
They increase strength, but length matters more. If a site rejects symbols, use a longer password with letters and numbers.
What does "avoid look-alikes" do?
It removes characters that are easily confused, such as capital I, lowercase l, capital O, zero and one.
Last reviewed 2026-10-27. This password generator is provided for general information; verify important decisions with a qualified professional.