Password Generator
Strong random passwords and easy-to-type passphrases, generated with your browser's cryptographic random number generator. Nothing leaves this page.
Bulk generate
How strong is strong enough?
Strength is measured in bits of entropy: how many guesses an attacker would need if they knew exactly how the password was generated. Each extra bit doubles the work. Roughly: under 40 bits is weak, 60+ bits holds up well against online attacks, and 80+ bits is out of reach even for offline cracking rigs. A 20-character password using all four character sets has about 130 bits.
Passwords vs passphrases
A passphrase is several random words, like Orbit-Velvet-Cactus-Harbor-Lantern42-Willow. It's much easier to remember and type, for example a laptop login or a password manager's master password. The strength comes from the words being picked at random from a list, not chosen by you. Use six or more words. For everything else, let a password manager store a long random password.
Is this generator safe?
Yes. Passwords are created with crypto.getRandomValues, the browser's cryptographically secure random number generator. Rejection sampling makes sure every character is equally likely. Everything runs locally: nothing is stored, logged or sent over the network.