Free online password generator. Create strong, random passwords with custom length and character sets. Runs entirely in your browser — passwords never leave your device.
A strong password is the first line of defence for any account. This free password generator creates cryptographically random passwords using the Web Crypto API, which is the same standard used by security-focused applications to generate tokens and keys.
Strong passwords should be at least 12 characters long and include a mix of uppercase letters, lowercase letters, numbers, and symbols. The generator defaults to settings that produce passwords that meet most platform requirements and pass common password strength checks.
Human-chosen passwords are predictable — people reuse words, names, and patterns. A randomly generated password has no pattern, making it immune to dictionary attacks, credential stuffing, and guessing. The longer and more varied the character set, the more combinations an attacker must try.
Always store generated passwords in a reputable password manager (1Password, Bitwarden, Dashlane) rather than writing them down or reusing them. This tool generates the password client-side — it is never transmitted, logged, or stored anywhere.
Very secure. Passwords are generated using window.crypto.getRandomValues(), the browser's cryptographically secure random number generator. This produces true randomness with no predictable pattern. A 16-character password using all character types has approximately 95¹⁶ possible combinations — trillions of years to brute force.
No. Password generation happens entirely in your browser using JavaScript. The password is displayed on screen and never sent to any server, stored in a database, or logged. Once you close the browser tab, the password is gone unless you copied it.
Length is the most important factor — each additional character multiplies the number of possible combinations. Character variety adds further strength: a 12-character password using uppercase, lowercase, numbers, and symbols has more possible combinations than a 20-character password using only lowercase letters.
The minimum recommended length is 12 characters. For sensitive accounts (banking, email, work systems), use 16-20 characters. For most other accounts, 12-16 characters with mixed character types provides excellent security. Some platforms have maximum length limits — check before generating.
Yes, if the platform allows it. Symbols dramatically increase the character set size. With lowercase only (26 chars), each position has 26 possibilities. With uppercase, lowercase, numbers, and symbols (~95 chars), each position has 95 possibilities — a 12-character password becomes orders of magnitude harder to crack.
A password is a random string of characters. A passphrase is a sequence of random words (e.g., "correct-horse-battery-staple"). Passphrases are often easier to remember while still being very strong. For accounts where you need to type the password without a manager, a passphrase may be more practical than a random string.