Password Generator
Random passwords from 8 to 64 characters, or passphrases of 3 to 8 words. Made on your device and never stored.
Output · 16 chars · 4 classes
Local · not storedKnown-breach check
Optional. Your browser hashes the password; only the first five SHA-1 characters are sent.
- Local-only
- 100%
- Max length
- 64
Related tools
Guides
This password generator builds random passwords from 8 to 64 characters (16 by default) using your browser's crypto.getRandomValues. You choose which character types to include, and every type you switch on appears at least once. If you'd rather type something you can remember, Passphrase mode joins 3 to 8 words from a built-in list of 77, with an optional number on the end.
Passwords are made on your device and never saved; only your settings are remembered. The one network request is the optional Known-breach check. Your browser hashes the password with SHA-1 and sends just the first five characters of that hash, then compares the results locally.
How to use the password generator
- Choose Random or Passphrase under Mode.
- For Random, set Length. Open Character classes to switch lowercase, uppercase, numbers and symbols on or off, or to exclude look-alike characters (i, l, I, 1, L, 0, o, O) and brackets and slashes.
- For Passphrase, set Words. Under Phrase options, pick a separator (dash, dot, underscore or space) and turn capitals and the appended number on or off.
- A new password appears whenever you change an option. Tap it to copy, or click Regenerate.
How strong is strong enough?
The tool rates strength in bits of entropy. A 16-character password with all four character types draws from 80 characters, which works out to about 101 bits, far beyond brute force. Passphrases are easier to type but much weaker here, because each word from a 77-word list adds only about 6.3 bits. Four words plus a number come to roughly 32 bits, and even 8 words reach only about 57. For anything that matters, use Random mode.
Example passwords
Three from Random mode at 10 characters, and one passphrase:
- N8@qR4!xL2
- tP#94aX!mW
- G7&uK9!vB3
- Cedar-Lantern-Opal-Wren-42
Frequently asked questions
Are generated passwords secure?
Random mode picks each character with crypto.getRandomValues and rejection sampling, so every character in the set is equally likely. At the default 16 characters with all four types, that's about 101 bits. Passphrase mode is far weaker, as explained above.
Is my password sent anywhere?
No. It's made in your browser. If you click Check password, only the first five characters of its SHA-1 hash are sent. Many other hashes share that prefix, so the server can't tell which password you checked.
Which symbols does it use?
!@#$%^&* always, plus { } [ ] ( ) / \ ` ~ unless you switch on the Ambiguous exclusion. Some sites reject brackets or slashes, which is what that switch is for.
Can I choose password length?
Yes, from 8 to 64 characters. The default is 16.
Built and maintained by Bipul Kumar. Found a wrong number or a broken result? Tell me and I'll fix it.