Password generator
A new strong password every click, made on your device.
Frequently asked questions
Are these passwords safe to use?
They are generated in your browser with the Web Crypto API (crypto.getRandomValues), the same source of randomness used for encryption keys. Nothing is sent over the network or stored.
How long should a password be?
At least 12 characters for everyday accounts and 16 or more for email, banking and password-manager master passwords. Length adds more strength than symbols do.
What does the strength number mean?
It is the entropy in bits: how many guesses an attacker would need, as a power of two. Around 60 bits is good, 80 is strong and 100+ is very strong.