Strong Password Generator
Generate a strong random password or an easy-to-remember passphrase with the length and character types you choose, and copy it in one click.
Password
How to use it
- Choose the type: a password of characters, or a passphrase of words.
- Set the length and character types, or the number of words and the separator. The result refreshes with every change.
- Press “Copy”, or “Generate another” if you want a different one.
Examples
- The default16 characters: lower case, upper case and digits about 95 bits: very strong
- Every type in 8 characters8 characters: lower, upper, digits and symbols about 48 bits: fair
- Digits only12 digits about 39 bits: weak
- A passphrase6 words 60 bits: strong
Tool details and privacy
A strong random password is ready as soon as the page opens. Change the length and character types, or switch to a passphrase of easy-to-remember words, then copy it in one click. The tool is free and runs entirely in your browser.
The randomness comes from the browser’s cryptographic number generator, and each character is chosen with no bias towards any other. Strength is measured in bits: each extra bit doubles the number of guesses needed.
Options
- A password of 8 to 64 characters: lower case, upper case, digits and symbols.
- Leave out look-alike characters such as O and 0, l and 1, for passwords you will type by hand.
- A passphrase of 4 to 10 short English words with a separator you choose, plus a capital letter or a digit if a site demands them.
Limits
- The password contains at least one character of every type you select, and the strength figure accounts for that.
- Passphrase words come from a list of 1,024 English words, so each word adds 10 bits.
- The strength shown is an estimate of the number of possibilities, not a guarantee. Do not reuse one password across accounts.
- The tool keeps no history: generating a new password replaces the one before it.
Privacy
The password is generated inside your browser. It is not sent to any server, it is not stored in the page or its address, and it is gone when you close the page.
Questions
How long should a strong password be?
16 characters of lower case, upper case and digits give about 95 bits, which is enough for most accounts. Do not go below 12 characters.
Which is better: a password or a passphrase?
A passphrase is easier to remember and type, and a password is shorter for the same strength. Six words give 60 bits, about the strength of ten random letters and digits.
Is the password stored or sent to the site?
No. It is generated in your browser and stays there, and it is gone when you close the page.
Where should I keep my passwords?
In a password manager. Use a different password for each account, and do not keep them in an open file.