About this random password generator
A random password generator creates a strong, unpredictable password in one click. Set the “Length: 16” slider anywhere from 8 to 64 characters, pick your character sets, then click “Generate password” for a unique password you can copy into any form or password manager.
Reused and weak passwords drive most account takeovers: attackers take a password leaked from one breach and try it on thousands of other sites in seconds, so one reused password can unlock your email, banking, and social accounts at once. A unique random password per account breaks that chain — and since everything here is generated locally with the Web Crypto API, your passwords never leave your device or get seen by anyone, including us.
How to use it
- Drag the "Length: 16" slider to set the length (8–64 characters). Longer is exponentially stronger — 16 or more is a good default.
- Tick the character sets to include: "Uppercase (A-Z)", "Lowercase (a-z)", "Digits (0-9)", and "Symbols (!@#$)". Using all four maximizes the pool each character is drawn from.
- Optionally tick "Memorable password" for a pronounceable, syllable-based password that is easier to type and recall without a manager.
- Click "Generate password" — a new password appears instantly. Click it again any time for a fresh one.
- Check the "Strength:" meter (Weak / Fair / Strong / Very strong) and its bits readout, then click "Copy" to copy the password.
The method behind it
Frequently asked questions
Is it safe to generate passwords in my browser?
Yes. The password is created entirely on your device using the Web Crypto API and never leaves it — not sent to our servers, not logged, not stored. The only place it exists is your screen and clipboard, so keep it in a password manager after copying.
How long should my password be?
Use at least 16 characters for important accounts — email, banking, your password-manager master password — drawn from all four character sets. Length beats cleverness: each extra character multiplies the attacker's work. For low-risk accounts, 12–14 characters is a reasonable minimum.
What is "Memorable password" mode?
Instead of raw random characters, it generates pronounceable syllable sequences like "vok-trep-munda-zil" that you can actually read, say, and type without copy-paste — handy for Wi-Fi passwords, shared accounts, or anything you must type by hand. Entropy per character is lower, so use a longer length (20+) to compensate.
What do the bits on the strength meter mean?
Bits measure entropy: the binary guesses an attacker needs on average, 2^(bits-1). Below 40 bits ("Weak") falls to modern hardware in hours; 60–79 bits ("Strong") resists anything short of a nation-state; 80+ bits ("Very strong") is effectively unguessable. The meter updates live as you change length and character sets.
Worked example
Take a 10-character lowercase-only password: 26¹⁰ ≈ 1.41 × 10¹⁴ combinations, about 47 bits ("Fair") — an attacker guessing a billion passwords per second cracks it in under two days. Now a 16-character password from all 94 printable characters: 94¹⁶ ≈ 3.7 × 10³¹ combinations, about 105 bits. At the same rate, cracking it takes roughly 10¹⁵ years — far longer than the universe has existed. Six extra characters and a full character set turn a crackable password into an uncrackable one.