Skip to content
Toolbox

Strong Password Generator

Generate strong random passwords using the Web Crypto API. Control length and character sets and see a live strength estimate.

StrengthVery strong

129 bits of entropy — longer than the age of the universe to crack offline at 100 billion guesses per second.

16 or more is recommended.

Include

Generated with the Web Crypto API in your browser. Nothing is transmitted, logged or stored.

About Password Generator

Create passwords from the browser's cryptographically secure random number generator. You control length and which character sets are included, and the tool guarantees at least one character from every set you enable. The estimated entropy and crack time update as you adjust the settings.

How to use it

  1. Set the length — 16 characters or more is recommended.
  2. Choose which character sets to include.
  3. Optionally exclude look-alike characters such as l, 1, O and 0.
  4. Generate and copy. The password is never stored or transmitted.

Frequently asked questions

How is this different from a random password on other sites?

This generator uses crypto.getRandomValues, the browser's cryptographically secure source. Many tools use Math.random, which is predictable and unsuitable for anything protecting an account.

How long should my password be?

At least 16 characters with mixed sets, giving roughly 100 bits of entropy. For a master password or anything protecting money, use 20 or more.

Is the generated password sent anywhere?

No. It is created in your browser, is never transmitted, and disappears when you close the tab. Nothing is logged.

In-depth reads that go beyond the calculator.