Password Generator
Build a strong random password with the length and character sets you choose - generated locally, never sent anywhere.
The password stays until you press Generate another.
How this estimate is calculated
Runs entirely on your device - nothing is ever uploaded.
More tools
- QR Code Generator Turn any link or text into a downloadable QR PNG. Get started
- SHA Hash Generator SHA-256 and SHA-1 hashes of text or files. Get started
- UUID Generator Generate random UUID v4 identifiers in bulk. Get started
- URL Encoder Percent-encode text for safe links and queries. Get started
- Base64 Encode/Decode Encode text to Base64 and decode it back. Get started
- JSON Formatter Pretty print, validate and minify JSON instantly. Get started
- Unit Converter Length, weight, temperature, and more. Get started
- Speed Converter kph, mph, m/s, knots, and Mach. Get started
How to make a strong password
- Set the length with the slider, or type a number such as 16, 20, or 24.
- Choose the character types the site requires. Leave "Include at least one of each selected type" on when it insists on a number or a symbol.
- Press Generate another, then Copy password into a password manager.
What makes a password strong
The rating is an estimate from the length and the characters you allow. A longer password from a larger set is harder to guess. It is not a promise about a particular website or attacker. Uniqueness matters as much as length: reuse is how most accounts fall, so keep each password in a password manager and turn on two-factor authentication.
Why generated beats memorable
Human-chosen passwords cluster around words, names, and patterns attackers try first. This generator uses the browser's cryptographic random-number API and picks from the characters you allow. The rating estimates that randomness. It does not say whether a site stores the password safely.
Worked example
A 16-character password from upper + lower + digits + symbols (94 characters) has 94¹⁶ ≈ 3.7 × 10³¹ combinations, or log₂(94¹⁶) ≈ 105 bits of entropy - far beyond brute force when stored hashed. A 6-character lowercase password has only 26⁶ = 308,915,776 combinations (~28 bits) and falls in seconds on GPUs. Length beats complexity: 20 lowercase letters (26²⁰ ≈ 95 bits) outlast 8 mixed characters.
Limitations
Generated passwords are only as safe as where you keep them - store them in a password manager, never reuse across sites, and enable two-factor authentication. Some sites silently truncate or reject symbols; if login fails, check their exact length and character rules rather than shortening blindly. Nothing leaves your browser: generation and entropy estimates run locally.