This strong password generator creates random passwords from 6 to 128 characters with uppercase, lowercase, digits and symbols, or passphrases made of easy-to-remember words. A meter calculates the entropy in bits and estimates how long an attacker would need to crack it.
Passwords are generated in your browser with the system's cryptographic generator and are never sent or stored anywhere — not even in your history.
How to use
- 1Choose “Random password” or “Passphrase”.
- 2Set the length and character types (or the number of words).
- 3Check the strength, entropy and estimated crack time.
- 4Copy the password and store it in your password manager.
What you can do
- Length from 6 to 128 characters
- Upper, lower, numbers and symbols
- Word-based passphrases
- Entropy and crack-time meter
- Browser cryptographic generator
What makes a password strong
Length and randomness matter most. A 16-character password with letters, digits and symbols has over 100 bits of entropy and would take centuries to guess with today's computing power. By contrast, “Maria1990!” looks complex but falls within the first guesses of any dictionary attack.
- Use at least 12–16 characters; 20 or more for important accounts.
- A different password for every site.
- Never personal details: names, dates or pets.
- Turn on two-factor authentication whenever possible.
Passphrases: strong and memorable
A passphrase joins several random words, like “cloud-pencil-river-drum-4”. Five or six random words are as secure as a long character password but far easier to remember and type — ideal for your password manager's master password or your computer login.
How strength is calculated
Entropy measures how many combinations are possible: every bit doubles the number of guesses needed. Crack time assumes a very powerful offline attack at 10 billion guesses per second. Excluding ambiguous characters (I, l, 1, O, 0) slightly lowers entropy in exchange for fewer mistakes when typing the password by hand.
Frequently asked questions
Is it safe to generate passwords online?
Here, yes: the password is created with crypto.getRandomValues in your own browser, without bias and without being sent over the network. You can check by disconnecting from the internet and generating another one.
How many characters should a strong password have?
At least 12, and preferably 16 or more with mixed character types. For critical accounts, 20 characters or a 6-word passphrase.
Which is better, a password or a passphrase?
At the same entropy they are equally secure. A passphrase is easier to remember; a random password is shorter. If you use a password manager, long random passwords are the most convenient.
Do you store the generated passwords?
No. They are not stored on the server or in your account history. Copy it into your password manager before leaving the page.