Last updated:
Generate something that cannot be guessed
Passwords people invent are predictable: a name, a date, an exclamation mark on the end. The wordlists attackers use are built on exactly those patterns. A randomly generated password has no pattern — it is hard to memorise, but passwords should live in a password manager rather than in your head anyway.
This tool generates passwords using your browser’s cryptographic randomness source. The distinction matters: an ordinary random number generator can be predictable under the right conditions, while a cryptographic source is built specifically not to be.
Entropy: the real measure of strength
A password’s strength comes from the character set and the length together, expressed as entropy in bits. Every password you generate shows its value.
- Under 80 bits — borderline, and only for accounts that do not matter.
- 80-100 bits — a solid range for everyday accounts.
- Over 100 bits — use this for email, banking and your password manager’s master password.
The most effective way to raise entropy is not adding more character types but adding length. Nothing generated here is ever transmitted; close the page and it is gone.
How to create a strong password
Step 1: Set the length
Choose a length between 8 and 64 characters. Not going below 16 for anything important is a good rule.
Step 2: Choose character types
Enable uppercase, lowercase, digits and symbols. Some sites reject certain symbols — in that case turn symbols off and add length instead.
Step 3: Check the entropy
Look at the bit value shown next to the password. Aim for 100 bits or more on critical accounts.
Step 4: Copy it somewhere safe
Copy the password straight into your password manager. Do not put it in a notes app or email it to yourself.
Frequently Asked Questions
Is the generated password stored anywhere?
No. It is generated in your browser and exists only in your device’s memory; it is never sent to a server and never saved. Close the page and it is gone.
How long should a password be?
16 characters is a sensible floor for everyday accounts. For accounts that unlock other accounts — email, banking, your password manager’s master password — prefer 20 or more.
How many bits of entropy do I need?
80 bits is an acceptable threshold for ordinary accounts; 100 bits and above makes brute-force attempts impractical for the foreseeable future. The most efficient way to raise the number is to increase the length.
Can I reuse the same password in several places?
Don’t. However strong it is, a breach at one site opens every account where you used it. Generate a separate password for each account and keep them all in a password manager.
Is the randomness actually trustworthy?
Passwords are generated from the randomness source browsers provide for cryptographic use. Unlike an ordinary random number generator, it is designed so that its output cannot be predicted.
Related Tools
- Custom QR Code GeneratorCreate colored QR codes with custom dot styles and an icon in the middle.
- Word & Character CounterLive text analysis: words, characters, sentences, paragraphs and reading time.
- JSON Formatter & ValidatorMake tangled JSON readable and catch syntax errors instantly.
- Base64 Encoder / DecoderEncode text to Base64 or decode Base64 back to text.
- Photo Metadata & Privacy CleanerSee the GPS location, device details and hidden EXIF/C2PA data in your photo — then strip it in one click.
- Image Compressor & Format ConverterCut file size without visibly hurting quality (WebP / JPG / PNG).