How to use the password generator
- 1Choose a length with the slider. 16 characters or more is a good default.
- 2Tick the character types to include: uppercase, lowercase, numbers and symbols.
- 3Optionally exclude look-alike characters such as O and 0 if you will type the password by hand.
- 4Press Generate for a new password, then Copy to copy it.
- 5Save it straight into your password manager.
How the passwords are generated
Passwords are created with your browser's built-in cryptographic random number generator (the Web Crypto API). This is the same source of randomness browsers use for security features, and it is far less predictable than ordinary random functions.
Generation happens entirely on your device. The password is never sent over the internet or stored by this site.
What makes a password strong
Length matters most. Each extra character multiplies the number of possible passwords, so a long password is much harder to guess than a short one with a few symbols. Current guidance from standards bodies such as NIST favors longer passwords over complicated composition rules.
The strength meter shows an estimate of entropy in bits: length multiplied by the log base 2 of the number of possible characters. As a rough guide:
- under 50 bits: weak
- 50 to 79 bits: reasonable
- 80 to 99 bits: strong
- 100 bits or more: very strong
Good habits
- Use a different password for every account.
- Store passwords in a reputable password manager instead of a note or spreadsheet.
- Turn on two-factor authentication where it is offered.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are generated in your browser using the Web Crypto API and are never transmitted or saved. You can even load the page and then disconnect from the internet before generating.
How long should my password be?
For accounts you log into with a password manager, 16 to 24 random characters is a good choice. If you must type it often, use the longest length you can manage.
Should I exclude similar characters?
Only if you will read or type the password by hand. Excluding characters such as l, 1, I, O and 0 slightly reduces strength, which you can offset by adding a character or two.
Why does the site warn me when I untick everything?
At least one character type is needed to build a password. The generator will ask you to choose one.
Last updated