Strong passwords.
Zero guesswork.
Create a random password with your device’s cryptographic random-number generator. It is never sent to a server.
What makes a password strong.
Randomness and length. A generator gives you both; a password manager remembers the result.
Each character from an 85-character set adds about 6.4 bits of strength. This generator guarantees at least one character from every set you tick, shuffles the result, and uses unbiased sampling so no character is more likely than another.
- Use 16 characters or more for email, banking and work accounts.
- Never reuse a password across sites.
- Store passwords in a password manager, not a notes app.
- Turn on two-step verification wherever possible.
See the calculated numbers in How long should a password be?
Is it safe to generate a password on a website?+
This page creates the password with your browser’s built-in cryptographic generator (crypto.getRandomValues) and never transmits it. You can disconnect from the internet after the page loads and it still works.
What length should I choose?+
At least 16 characters for important accounts. Our calculations show 16 random characters from all four sets would take an estimated 100+ billion years to guess at one trillion guesses per second.
Why avoid look-alike characters?+
If you ever need to read or type the password by hand, removing 0/O and 1/l/I prevents mistakes. It slightly reduces the character set, so add a character or two.
Can a site reject symbols?+
Some do. Untick Symbols and increase the length to keep the same strength.
Password length, calculated ↗ · Share Wi-Fi with a QR code ↗