Password Generator

Strong random passwords, generated on your device with the browser's crypto — never sent anywhere.

A strong password generator that runs on your device: choose the length (8–64) and the character sets, and the password is made with the browser's cryptographic random number generator — never sent anywhere, never stored. The meter shows its strength in bits and an estimated time to crack.

A password you reuse may already be in a breach list — and every account that shares it can be opened with it.

Random, long, made on your device with Web Crypto. Never sent anywhere.

Set your options and generate
Strength
  • 16+ characters
  • lower case
  • upper case
  • number
  • symbol

Runs in your browser — nothing is uploaded, nothing is stored. Close the tab and it is gone.

After the new passwords

One password per account, kept in a manager

Your logins todayYour logins, one per account

Left: one password used on the website, the email and the bank, so a leak from any one of them opens the others. Right: a long random password for each account, kept in a password manager. Two-factor goes on the email account, because that is the one that resets everything else.

  • One long, random password per account — never reused
  • A password manager so you only remember one
  • Two-factor on the email that resets everything else
900+ projects
since 2017
4.9★
400+ five-star reviews on Fiverr
9+ years
building WordPress and Next.js sites

Support is the whole team, not one person — reach us any time, and someone picks it up.

“He was able to deliver what was needed.”
Build Smart And Save · 3-page WordPress site · the project

Schedule a Meeting

Bring the site or the page you are working on. I lead every project, and on the call we go through it together and decide what to do first.

Schedule a Meeting

How it works

How to use the Password Generator

  1. 01Set the length (8–64) and which character sets to use: a–z, A–Z, 0–9, symbols.
  2. 02Generate — the meter shows the strength in bits and an estimated time to crack.
  3. 03Copy it straight into your password manager.

Good to know

Randomness

Passwords come from the browser's cryptographic random generator (Web Crypto) with an unbiased pick and a proper shuffle — not Math.random.

In more depth

About the password generator

What makes a password strong

Three things: it is long, it is random, and it is unique. Long because every character multiplies the work of guessing; random because attackers try dictionary words, names, dates and the usual substitutions (p@ssw0rd) first; unique because password leaks are routine and a reused password turns one breach into many.

This generator handles the first two. It draws each character from the browser's cryptographic random source, guarantees at least one character from every set you switch on, and shuffles the result so the guaranteed characters do not sit in a predictable place.

How the strength estimate is calculated

The meter counts the size of the character pool you chose and the length, giving entropy in bits, then divides the number of possible passwords by two attack speeds: about 10¹⁴ guesses per second for an offline attack on a stolen password database with a fast hash and a large GPU rig, and about 1,000 per second for an online attack through a login form that limits attempts. The results are estimates to compare passwords by, not guarantees.

FAQ

Password Generator — questions

Is a password generated here safe to use?

Yes. It is created on your device with Web Crypto (the browser's cryptographic random generator), it is never transmitted, and this page keeps no record of it. Copy it into a password manager and close the tab.

How long should a password be?

16 characters or more for anything that matters. Length adds more strength than symbols do: every extra character multiplies the number of guesses an attacker needs.

Do I need symbols?

Not necessarily. A 16-character password of letters and digits is already far beyond what can be brute-forced; symbols help most when a site limits the length. Turn them off if a site rejects them.

What do the bits mean?

Entropy in bits is the number of equally likely possibilities, on a log scale: each extra bit doubles the guesses needed. Around 60 bits is strong for online accounts; 80+ holds up even against an offline attack on a stolen database.

Why not use the same strong password everywhere?

Because one leaked site exposes all of them. Generate a different one per account and keep them in a password manager.

More tools

The other tools

All tools

Next step

Need a tool that does not exist yet?

Small internal tools like these are a normal part of the work — tell me what your team does by hand.