How to use
- Set the length; 16 characters or more is a good default.
- Adjust the list of characters to use if a site restricts symbols.
- Press Run and copy the password into your password manager.
When to use it
- Creating passwords for new accounts
- Replacing short or reused passwords after a data breach
- Making a strong Wi-Fi or router admin password
What makes a password strong
Length matters more than anything else. Each extra random character multiplies the number of possible passwords, so a random 16-character password drawn from letters, digits and symbols has more combinations than any attacker can try.
The generator picks each character with crypto.getRandomValues, the same secure random source browsers use for encryption, and rejects biased values so every character is equally likely. The password exists only on this page until you copy it.
Use a different password for every site and keep them in a password manager rather than trying to remember them.
Frequently asked questions
Is the password sent or saved anywhere?
No. It is generated in your browser and disappears when you leave the page.
How long should a password be?
At least 12 characters, and 16 or more for important accounts such as email and banking.
A site rejects symbols. What can I do?
Remove the symbols from the character list and make the password a few characters longer to keep it strong.