Random Password Generator

How it works

Type how many passwords you need in the left box; the page opens with 5 ready-made ones. Every time you move the length slider or switch the character set, the list regenerates — so nudging the slider is all it takes to get a fresh batch. As a reference point, a 16-character password from the full letters-digits-symbols set carries roughly 100 bits of strength, which means an attacker testing ten billion guesses per second would still need longer than the age of the universe. The status line reports this figure in bits on every run and rates it weak, medium, strong or very strong. "Copy output" puts the whole list on your clipboard; the download button saves it as a text file. Generation uses the browser's cryptographic random source (crypto.getRandomValues) and happens entirely on your device — no password ever crosses the network, so nobody, including us, can see it.

This tool is also known as random password generator, strong password generator, secure password generator offline, password generator no signup, create strong password.

What is Strong password?

What makes a password strong is not how complicated it looks but how many possible combinations it was drawn from — and length grows that number far faster than anything else. Adding symbols to the set raises each position's options from the sixties into the eighties; adding just two more characters multiplies the total combinations thousands of times over. That is why a 20-character letters-and-digits password beats a 12-character one full of symbols. The second requirement is unpredictability: birth dates, keyboard walks (asdf1234) and dictionary words top every cracking list no matter how long they are, which is precisely the weakness random generation removes.

What is Entropy (password strength in bits)?

Entropy measures how many possible combinations a password was chosen from, expressed in bits — each bit doubles the possibilities. The rough formula is length × log2(set size): 16 characters drawn from a 90-character set comes to about 104 bits. Below 40 bits, modern hardware can run through the space in minutes; around 60 bits resists a determined attack only barely; 80 bits and above is considered practically uncrackable. The status line on this page shows the figure for every batch — but note that entropy only holds for randomly generated passwords. A password a human invents has far less real entropy than the formula suggests.

A random password is only as safe as where it was made

The critical property of a password generator is its source of randomness. This tool uses the browser's cryptographic source (crypto.getRandomValues) and removes modulo bias with rejection sampling, so every character is drawn with equal probability. On sites that generate server-side, your password has passed through someone else's machine in its very first second of existence — here, generation ends on your device and no password ever appears in network traffic.

The real risk starts after generation: e-mailing or messaging a password to yourself hands it to servers in plain text. Save the generated password straight into a password manager, and never reuse one across accounts — a single breach turns the strongest password worthless everywhere it was reused.

Which setting for which job?

The default (16 characters, full set) is the right balance for account passwords that will live in a password manager. When a site imposes rules, narrow the character set rather than shortening the password — a narrower set costs far less strength than fewer characters.

• Account password (stored in a manager) → 16-24 characters, full set
• Legacy systems that reject symbols → 20 characters, letters + digits
• Wi-Fi password typed by hand on a phone → 16 characters, lowercase + digits
• Card or door PIN → digits only, set look-alikes to "Keep"

Frequently asked questions

Are the generated passwords stored anywhere?

No. Generation happens inside your browser; the passwords are neither sent to a server nor saved by the browser. Closing the tab destroys the list — so store the one you pick in your password manager first.

How long should my password be?

For passwords stored in a manager, 16 characters or more is considered safe; once the status line shows over 80 bits, the password is practically uncrackable. For passwords you will type by hand, do not go below 12 characters.

How do I generate a fresh batch?

Retype the count, or change any option — nudging the length slider is enough. The list regenerates on every change.

Why are there no 0s or 1s in my PIN?

While "Exclude look-alikes" is selected, 0 and 1 are removed from every set to avoid confusion with the letters O, l and I. For digits-only PINs, switch the option to "Keep" and all ten digits are used.