Password Generator

Generate secure, random passwords with custom options. Free and private.

Your password will appear here

16
464

🔒 Privacy Note: All passwords are generated locally in your browser. Nothing is sent to any server.

How to Generate a Strong Password

1. Set your length

Use the slider to choose a password length. 12 characters is the minimum, 16 is recommended for most accounts, and 20+ is best for email and banking passwords.

2. Enable all character types

Turn on uppercase, lowercase, numbers, and symbols. Each additional character type multiplies the number of possible combinations, making your password exponentially harder to crack.

3. Generate and save

Click Generate, copy the password, and save it in a password manager like Bitwarden, 1Password, or your browser's built-in manager. Never reuse a password across accounts.

Password Strength by Length and Complexity

LengthLowercase only+ NumbersAll character typesVerdict
8 charsMinutesHoursDaysWeak — avoid
10 charsHoursDaysMonthsMarginal
12 charsDaysMonthsYearsAcceptable minimum
16 charsCenturiesCenturiesBillions of yearsStrong — recommended
20 charsAstronomicalAstronomicalAstronomicalVery strong

Password Security Best Practices

Use a unique password per account
If one site is breached, attackers try the same password everywhere. Unique passwords per account means one breach cannot cascade.
Use a password manager
Store generated passwords in Bitwarden (free), 1Password, or your browser. You only need to remember one master password.
Enable two-factor authentication
Even a strong password can be phished. 2FA (an authenticator app, not SMS) adds a second layer that a stolen password alone cannot bypass.
Never use personal information
Attackers use names, birthdays, pet names, and favourite sports teams in targeted attacks. A random password has none of these patterns.
Avoid password patterns
Passwords like "Password1!" or "Summer2024#" follow predictable patterns that are cracked early in dictionary attacks.
Change passwords after breaches
Check if your email has been in a breach at haveibeenpwned.com. If it has, change that password and any account using the same one.

How Password Generators Work

This password generator uses the browser's built-in crypto.getRandomValues() API — the same cryptographically secure random number generator used in security software. Unlike Math.random(), which is predictable, the Web Crypto API produces true random values that cannot be predicted or reproduced. All generation happens in your browser — no passwords are transmitted to or stored on any server.

Frequently Asked Questions

Common questions about Password Generator