Password Generator
Generate strong random passwords and memorable passphrases with true cryptographic randomness. Choose length and characters. Free, private, made on your device.
- No upload — 100% private
- Instant, on your device
- Free, no sign-up
- Works offline once loaded
How it works
How to use Password Generator
Choose Password for random characters or Passphrase for a string of easy-to-type words.
Set the length (or number of words) and pick which character types to include.
Watch the strength meter and estimated crack time update as you adjust the options.
Copy the password you like — or generate a fresh batch with one click.
Why use it
Why use our Password Generator tool
Cryptographically secure
Uses the Web Crypto API (crypto.getRandomValues) with rejection sampling, so every character is equally likely — no Math.random, no hidden bias.
Passphrase mode
Builds memorable passphrases from a list of about 1,500 common words, with your choice of separator, capitals and a number.
Every option honoured
If you tick digits or symbols, each password is guaranteed to contain at least one, at any length from 4 to 128 characters.
No look-alikes
Optionally drop characters that are easy to confuse such as I, l, 1, O and 0 — handy for passwords you read out or type by hand.
Entropy and crack time
See the strength in bits and how long a fast offline attack or a rate-limited online attack would take.
Never transmitted
Passwords are created in your browser and are never sent over the network, saved or logged.
FAQ
Frequently asked questions
How long should my password be?
For most accounts, 16 or more random characters is excellent; 12 is a sensible minimum. For a passphrase, use at least 5 random words. Length adds far more strength than swapping letters for symbols.
Are these passwords truly random?
Yes. They come from your browser's cryptographically secure random generator, and we use rejection sampling so no character or word is picked more often than another. The tool never uses Math.random.
Is a passphrase as secure as a random password?
It can be. Each random word from our 1,500-word list adds about 10.5 bits of entropy, so six words give over 60 bits — comparable to a 10–11 character random password, and much easier to remember and type on a phone.
Can you see the passwords I generate?
No. Everything runs locally in your browser — nothing is sent to a server, stored or logged. You can even disconnect from the internet after the page loads and it keeps working.
What does “bits of entropy” mean?
It measures how many guesses an attacker would need: each extra bit doubles the work. Around 60 bits resists online attacks easily, while 80+ bits holds up even against powerful offline cracking rigs.
How should I store strong passwords?
Use a password manager. It remembers a unique password for every site, so you only need one strong passphrase to unlock it. Never reuse the same password on multiple accounts.
Related tools
Password Strength Checker
See how long your password would survive — privately.
Hash Generator
MD5, SHA-1, SHA-256, SHA-512 and HMAC for text or files.
UUID Generator
Generate v4 and v7 UUIDs in bulk, then validate and decode.
WiFi QR Code Generator
Let guests join your Wi-Fi with one scan — print a neat card.