Password Generator

Generate strong, random passwords with custom length and character sets.

Create random passwords that are much harder to guess or crack. Pick your length, choose which character types to include and generate as many as you need. Everything happens in your browser using the Web Crypto API. No passwords are ever sent to a server.

What Actually Makes a Password Strong?

Length is king - This matters more than anything else. A 16-character random password is much harder to crack than an 8-character one with a few symbol swaps.
True randomness - "P@ssw0rd!" looks complex but it follows a pattern attackers know. Password cracking tools try common substitutions first. A random string like "kR7$mP2xL9@qW4" is far stronger.
No reuse - Password leaks hurt most when the same password works on more than one site. One exposed login should not unlock your email, banking and work accounts.
Character variety - Mix uppercase, lowercase, numbers and symbols when a site allows it. Variety helps, but length still does most of the work.

How Long Should Your Password Be?

The answer has changed over the years. Here is a practical way to think about it:

8 characters - Too short for anything important.
12 characters - Better, but still the minimum for low-risk accounts.
16 characters - A strong default for most logins.
20+ characters - Better for your email, banking and password manager master password.

Passphrases: The Alternative

If you need to type a password from memory, consider a passphrase. Four to six random, unrelated words are easier to remember than a symbol-heavy string and still give you useful length. Do not use a famous quote, song lyric or personal phrase. Pick words that do not naturally belong together.

Use a Password Manager When You Can

Most people cannot remember unique 16-character random passwords for every account. That is what password managers are for. Let the manager generate and store your passwords. You only need to remember one strong master password.

How to Use

Set your desired password length (16 characters or more is recommended).
Toggle which character types to include - uppercase, lowercase, numbers and symbols.
Click Generate to create a random password.
Copy it and save it in your password manager.

Frequently Asked Questions

Is this password generator actually secure?

It uses the Web Crypto API - the cryptographically secure random number generator built into your browser. Generation happens entirely on your device; nothing is transmitted or stored on any server.

How long should my password be?

At least 16 characters for regular accounts. For your email, banking and password manager's master password, go with 20+ characters. NIST and most security experts agree that length matters more than complexity.

Should I use a password manager?

It's the only realistic way to keep a different strong password for every account. You remember one strong master password, and the manager remembers the rest.

Is a passphrase better than a random password?

Both work well if done right. Random passwords have more entropy per character. Passphrases are easier to type and remember. If you use a password manager, random passwords are the way to go. If you need to memorize it, a 5-word passphrase is a great option.

Do I really need special characters in my password?

Length matters more than character variety. A 20-character password using only lowercase letters is stronger than an 8-character password with symbols. That said, if a site requires special characters, adding them to a long password only makes it stronger.