Password Generator
Private by design
Made on your device
Every character comes from your browser's cryptographic random generator, the same one it uses for encryption keys. Not the predictable kind most quick generators use.
Never sent, never saved
There is no server behind the generator. What you create never leaves this page, and it is gone the moment you close it.
Strength you can check
Strength is measured, not guessed: the exact number of possibilities, and how long a well-funded attacker making 100 billion guesses a second would need.
Password Generator FAQs
Is it safe to make a password on a website?
Yes, when the generator runs entirely in your browser, as this one does. Your password is created on your device and never sent to us or anyone else. You can check: open your browser's developer tools, watch the Network tab and generate as many as you like. Nothing goes out.
What makes a password strong?
Three things: it is long, it is truly random, and you use it in one place only. Length matters most, because every extra character multiplies the work an attacker has to do. Reusing a password, however strong, means one leaked site opens every account that shares it.
Is a passphrase really as strong as a password?
It can be. Each word is picked at random from 7,776, so five words give over 28 billion billion combinations, about the same as a random 10-character password. Add a sixth word and it beats most passwords people use, while staying easy to remember.
How long should my password be?
For anything a password manager fills in for you, 16 characters or more. You never type it, so longer costs you nothing. For a passphrase you type yourself, use at least five words, and six for your most important accounts, such as your email or your password manager.
How is the crack time worked out?
We count every password your settings could produce, then assume an attacker who knows those settings and can test 100 billion guesses a second. On average they find it halfway through. Real attacks on well-protected sites are far slower, so this is a cautious estimate.
Should I write my passwords down?
Keep them in a password manager instead. It remembers every password for you, so the only one you need to know is its own, and that is exactly what a passphrase is for. If you must write one down, keep it somewhere private and offline, never in a note on your phone or computer.
Where do the passphrase words come from?
From the Electronic Frontier Foundation's long word list: 7,776 common English words chosen to be easy to spell and hard to confuse. It is the standard list for this kind of passphrase.