Strong password generator

Create random passwords that are impossible to guess. They are produced by your own browser's cryptographic generator (crypto.getRandomValues): neither this site nor anyone else ever sees them.

Copied!

What makes a password strong?

Two things: length and randomness. Every extra character multiplies the number of possible combinations, and true randomness (not "Name2026!") defeats dictionary attacks. Our recommendation: 16 characters or more with all four types enabled, or 20+ for anything critical.

Essential good practices

  • A different password for every service. If you reuse one and a site gets breached, all your accounts fall at once.
  • Use a password manager (Bitwarden, 1Password, KeePass or your browser's built-in one) so you never have to memorize them.
  • Turn on two-factor authentication for email and banking: it is the safety net if a password leaks.
  • Never send passwords in plain text over chat or email.

Frequently asked questions

Can you see the passwords I generate?

No. Generation happens entirely in your browser using the system's cryptographic API (crypto.getRandomValues) and nothing is sent to any server. Disconnect from the internet after loading the page and the tool keeps working.

What length should I use?

At least 12 characters; 16 is recommended for normal accounts and 20+ for your main email, banking and password managers. With all four character types on, 16 characters give roughly 100 bits of entropy — infeasible to brute-force.

Is it truly random?

It uses crypto.getRandomValues, the browser's cryptographically secure generator, not Math.random(). It also applies rejection sampling so every character is equally likely.

How often should I change my passwords?

Current guidance (including NIST) is not to rotate on a schedule, but to change a password only when you suspect it was compromised. Long, unique passwords in a manager matter far more.

What if I can't remember complex passwords?

Don't try: use a password manager and memorize only the master password. For that one, a passphrase of 4-5 random words is easy to remember and very strong.