TR

Password Generator

Create a strong, random password in one click — complex or easy to remember.

Very strong

16
Characters to use
Generate several same settings

Passwords are made in your browser. They are never sent anywhere or saved.

How to use the password generator

  1. A strong password is ready as soon as the page opens. Press Copy and paste it where you need it.
  2. Choose the length with the slider (16 or more is a good default) and pick which characters to use: uppercase, lowercase, numbers and symbols.
  3. Prefer something you can type or remember? Open Memorable for a passphrase made of random words, or PIN for a number code.
  4. Press New until you like the result. The bar under the password shows how strong it is and how long it would take to crack.

What makes a password strong?

A strong password is one nobody can guess and no computer can work out in a reasonable time. Attackers don’t type passwords by hand: when a website is breached, they take the stored password hashes and test billions of guesses per second on graphics cards. Words, names, dates and simple patterns like Summer2024! fall first, because they are the first things those programs try.

That is why this tool picks every character at random with your browser’s cryptographic random number generator (crypto.getRandomValues), the same source used for encryption keys. There is no pattern to learn: each character is equally likely, and each new password has nothing to do with the last one.

Length beats complexity

Every extra character multiplies the number of possible passwords. With all four character types there are 86 options per character, so a 12-character password has about 77 bits of entropy and a 16-character one about 103 bits. In everyday terms, 8 random characters can be cracked in days on a fast machine, while 16 would take longer than the age of the universe. If a site limits which symbols you can use, simply make the password a few characters longer.

Memorable passphrases

Some passwords you have to type or remember, like the one for your computer or your password manager. For those, a passphrase of several random words such as Spout-Ivory-Grub7-Wager-Pecan-Flask is both strong and easy to type. The words are drawn at random from the EFF short word list of 1,296 common English words, so six words give about 62 bits before the number is added. The key is that the computer picks the words: a sentence you choose yourself is far easier to guess.

PIN codes

PINs are short, so they are only safe where wrong attempts are limited, like a phone lock screen or a bank card. The generator skips the PINs people pick most often, such as 1234, 0000, 1212 and years like 1990.

How the strength is measured

The strength bar shows entropy: how many guesses an attacker would need if they knew exactly how the password was made. The crack time assumes a well-funded offline attack testing 10 billion guesses per second and shows the average time to find it. Real sites often store passwords much more safely, so treat it as a worst case.

Private by design

Everything happens on your own device. Passwords are not sent to any server, not stored and not kept in a history; only your settings, such as the length, are remembered in this browser. For the best protection, use a different password for every account and keep them in a password manager.

Frequently asked questions

Is this password generator safe to use?

Yes. Passwords are created in your browser with its cryptographic random number generator and never leave your device. Nothing is sent to a server, logged or saved. You can even disconnect from the internet after the page loads and it still works.

How long should my password be?

Use at least 12 characters for everyday accounts and 16 or more for email, banking and your password manager. If you use a memorable passphrase, choose at least 5 or 6 words.

What does “leave out look-alike characters” do?

It removes characters that are easy to confuse when reading or typing, such as uppercase I, lowercase l, the number 1, the letter O and zero. It makes the password slightly shorter in possibilities, so add a character or two if you turn it on.

Is a passphrase as secure as a random password?

It can be. Six random words from a 1,296-word list have about 62 bits of entropy, similar to a 10-character random password, but they are much easier to type and remember. Add more words for important accounts.

Should I use the same strong password everywhere?

No. If one website is breached, attackers try the same email and password on other sites. Use a different password for every account and let a password manager remember them for you.