Password Generator
Random passwords for the accounts you keep in a password manager: choose the length and the kinds of character, then copy one.
Made in this page with your browser’s secure random generator. Nothing is logged, sent or saved, and passwords never go in the page address.
A strong, random password for every account
Reusing a password means one leaked site can open your other accounts. The fix is a different random password for each one, kept in a password manager so you never have to remember them. This generator makes those passwords: long random strings for your manager to store and fill in. For a password you must type or remember yourself, a passphrase is easier; the Passphrase Generator makes those.
How to use it
- Pick a length. Twenty characters suits most sites; go longer where a site allows it.
- Choose the kinds of character the site accepts. Each kind you choose appears at least once.
- Copy a password, paste it into the site’s sign-up or change-password form, and save it in your password manager.
- Press Regenerate for a fresh set at any time.
What the options do
- Length: every character adds randomness, so length matters more than anything else.
- Kinds of character: more kinds mean more choices for each character. The symbols are a set most sites accept; quotes, spaces, slashes and brackets are left out.
- Avoid look-alikes: drops 0, O, o, 1, l, I and |, which are easy to misread if you ever type a password from the screen. It costs a little randomness, and the figure shows how much.
- How many: up to 20 at once, to choose from.
Reading the randomness figure
The figure comes from your settings. Twenty characters, each one of 77, would give 20 × log2(77), about 125.3 bits, as an upper limit. Requiring one of each chosen kind rules out some combinations, so the tool counts exactly the passwords that meet the rule and shows that slightly lower number. Each extra bit doubles the number of passwords someone would have to try.
Good to know
- Private: nothing is logged, sent or saved, and nothing goes in the page address. Reloading the page clears the list.
- Fair: randomness comes only from crypto.getRandomValues, drawn so that no character is more likely than another.
- One site each: use every password on one account only. To lock a document instead, Protect PDF adds a password to a PDF.
- After a breach: if a site says your details may have leaked, make a new password here, change it on that site, and update the entry in your password manager.