Free, private, no sign-up
Password generator
Create a strong random password or passphrase in one click. It is generated on your device and never sent anywhere.
Generated in your browser with secure randomness. Nothing is sent or saved.
Choose a length and the character types you need, then press Generate. For most accounts, a random password of 16 or more characters, kept in a password manager, is a strong choice. For something you must type from memory, switch to a passphrase.
Generated on your device
The password is created by your browser's cryptographic random number generator. It is not sent to a server and it is not saved in the page, the address bar or browser storage.
Honest strength estimate
The meter shows bits of entropy, which depends only on how many possibilities the generator chose from. It does not guess how "clever" a password looks.
Passphrases included
Pick words at random from the 7,776-word EFF list for something easier to type and remember, with the same kind of strength math.
More tools
Guides
Use a new password for every account
A strong password protects you only if it is not reused. When one site is breached, attackers try the same email and password on other services. Generate a different password for each account and keep them in a password manager so you do not have to remember them. See what makes a password strong for the short checklist.
Frequently asked questions
Is this password generator safe to use?
The password is created in your browser using the secure random number generator built into it, and it is never sent to us. We do not store it and we do not include it in analytics. You can check this yourself by watching the network tab of your browser while you generate.
How long should my password be?
Longer is better because each extra character multiplies the possibilities. For accounts you protect with a password manager, 16 characters or more is a good default. Where a site allows it, choose even longer.
Do I need symbols in my password?
Symbols add more possibilities per character, but length adds more per character you can spare. A longer password of letters and numbers can be stronger than a short one with symbols. Some sites do require symbols, so the option is there.
What is a passphrase?
A passphrase is several random words joined together, for example four to six words from a large list. It is easier to type and remember than a string of random characters, and it can be just as strong when the words are chosen at random and the phrase is long enough.
Is the strength meter exact?
It is an estimate. It counts the possibilities the generator chose from and assumes an attacker who knows your settings and can try ten billion guesses per second. Real attackers and real systems vary, so use it to compare options, not as a promise.