Password Generator
Generate strong passwords and passphrases with a strength meter
- Files never leave your device
- Runs in your browser
- Free, no sign-up, no watermark
Very strong124.5 bits of entropy
Average time to crack at 10 billion guesses per second: centuries
Check a password
Type or paste any password to see how fast it could be cracked. It never leaves this page and is cleared when you close it.
How to use Password Generator
Generate random passwords, passphrases or PINs with your browser's cryptographic random number generator. Each result shows its entropy and an estimated cracking time, and a built-in checker rates any password you type.
- 1
Pick a Type: Password, Passphrase or PIN.
- 2
Set the Length (or Words, or Digits) and choose the character sets, symbols and options such as Exclude look-alikes or No repeated characters.
- 3
Click Regenerate until you like the result, then copy it.
- 4
Optional: set How many to create up to 1,000 values at once, then use Copy all or Download .txt.
- 5
To rate a password you already use, type it into Check a password and read the estimated cracking times.
Frequently asked questions
Are the generated passwords sent or stored anywhere?
No. They are generated in your browser with the Web Crypto API (crypto.getRandomValues) and are not stored, logged or sent. Once the page has loaded, it also works offline.
How is the strength worked out?
For generated values, entropy is calculated from your settings, and the crack time assumes 10 billion guesses per second. The checker estimates guesses by finding the patterns cracking tools try first: common passwords, dictionary words, keyboard runs, sequences, repeats and dates. It is an estimate and does not look the password up in breach databases.
Should I use a password or a passphrase?
Both are strong at the right length. A passphrase uses words from the 2,048-word BIP-39 English list (11 bits per word), so six words give about 66 bits and are much easier to type and remember than random characters.
What does Site-safe mean for symbols?
Site-safe uses only !#$%&*+-=?@^_, which most sign-up forms accept. All uses every ASCII punctuation character. You can also edit the Symbols to use field directly.
Is the password I type into the checker saved?
No. It never leaves the page and is cleared when you close it. The pattern breakdown is masked unless you click the eye icon to show the password.