Every password is built locally with the browser's Web Crypto random number generator - the same secure source used for encryption keys - so nothing is uploaded and the tool keeps working offline once the page has loaded. Random bytes are mapped to characters with rejection sampling instead of a plain remainder, so the mapping never skews toward part of the character pool. Set the length with the slider, tick the character types you need, and every selected type is guaranteed to appear at least once. The strength panel shows the entropy in bits and how long an offline attack at ten billion guesses per second would need on average.
Free Password Generator
Runs entirely in your browser - no upload, no sign-up.
Loading…
What is a password generator?
A password generator creates strong random passwords using a cryptographically secure random source. You choose the length and which characters to include - uppercase, lowercase, numbers, symbols - and it builds unpredictable passwords no human would pick. This one runs entirely in your browser, so a generated password is never sent anywhere.
How to use
- 1Set the length. Drag the slider or type a length from 4 to 128 characters. Sixteen is a strong default; use more for critical accounts.
- 2Pick character types. Tick uppercase, lowercase, numbers and symbols. Each selected type is guaranteed to appear at least once. Turn on the look-alike filter if the password will be typed by hand.
- 3Generate. Passwords are created instantly, and every settings change re-rolls a fresh batch. Press Regenerate any time for a new set.
- 4Copy and check the strength. Copy a single password or the whole list, and read the strength panel - entropy in bits and the average time an offline attacker would need to crack it.
Who it's for
- Anyone opening a new account who needs a strong, unique password instead of reusing an old one.
- Password-manager users generating a random login to store in their vault right away.
- IT admins and helpdesks issuing temporary passwords - the look-alike filter avoids O/0 and l/1 mix-ups when a password is read out or typed by hand.
- Developers and sysadmins minting database, service-account and Wi-Fi credentials in one batch.
- People on legacy sites that block symbols or cap the length - just untick symbols or shorten the slider to match the site's rules.
FAQ
Is this password generator free?
Yes, completely free with no sign-up, no ads to unlock and no limits. Everything runs in your browser, so you can generate as many passwords as you like, even offline once the page has loaded.
Are the generated passwords sent to a server?
No. Passwords are created locally with the Web Crypto API in your browser and never leave your device. Nothing is logged, stored or transmitted - close the tab and the passwords exist only where you pasted them.
Is it safe to use an online password generator?
It is safe when the generation happens client-side from a cryptographically secure source, as here: the password is produced on your device and never travels over the network. Avoid tools that generate passwords on a server, since the operator could log them.
How long should a password be?
Use at least 12-16 characters with several character types; 16 mixed characters gives about 103 bits of entropy, far beyond brute force. For password-manager master passwords or disk encryption, go longer - 20 characters or more.
What does the entropy figure mean?
Entropy measures the size of the password space an attacker has to search, in bits: each extra bit doubles it. The figure shown is length x log2(pool size), so length raises it fastest - 60 bits or more is strong against online attacks, 128 bits resists offline cracking. Guaranteeing one character per type trims a fraction of a bit off this ideal, which is negligible at these lengths.
What does the look-alike filter exclude?
It removes the six characters most often confused when a password is read or typed by hand: capital I, lowercase l, digit 1, capital O, digit 0 and lowercase o. The pool shrinks slightly, so add a character or two of length to compensate.
Why does my password always contain a number and a symbol?
When a character type is ticked, the generator guarantees at least one character of that type, so the password passes site rules like 'must contain a digit and a special character' on the first try. The guaranteed characters are shuffled into random positions.
Should I use a different password for every site?
Yes. Reused passwords are the main way one leaked site compromises your other accounts through credential stuffing. Generate a unique random password per site and keep them in a password manager, so you only ever memorize one strong master password.