Skip to content

Password generator

Generate a strong random password, or a passphrase you can actually remember, using your browser's cryptographic random number generator. The password is created on your device and never sent anywhere — which is the only sane way to use a password generator on the web.

  • Nothing you type leaves this page
  • Works offline once loaded
  • Free forever, no signup
{{ value || '—' }}
  • Strength {{ strength.label }}
  • Entropy {{ entropyBits }} bits
  • Offline attack {{ crackTime }}

Generated with your browser's cryptographic random number generator. Nothing is sent anywhere, and nothing is remembered once you close the page — copy it into your password manager before you leave.

How to use this tool

  1. Choose the style

    A random password for a password manager, or a memorable passphrase for something you must type by hand.

  2. Set the length

    Longer is stronger. The strength readout shows how long an offline attack would take.

  3. Copy it into your password manager

    Nothing is saved here, so store it before you close the page.

Questions people ask

Is this password generator actually safe to use?

The password is generated in your browser with crypto.getRandomValues, the same cryptographic source used for encryption keys, and it is never transmitted, logged or stored. Nothing about it reaches this site — you can disconnect from the internet and the tool still works.

How long should a password be?

For anything stored in a password manager, 16 characters or more with mixed character types is comfortably beyond brute force. For a password you must type from memory, a four or five word passphrase is both stronger and far easier to use.

Why is a passphrase as strong as a jumble of symbols?

Strength comes from the number of possible combinations, not from looking complicated. Four words drawn randomly from a large list produce more possibilities than a short "P@ssw0rd!" style password, and you can remember them.

What does the entropy figure mean?

It is the number of bits of randomness in the password — each extra bit doubles the work an attacker must do. Under 50 bits is weak, 75 is solid, and above 100 bits is beyond any foreseeable attack.

Why avoid look-alike characters?

The letter l, the digit 1, capital O and the digit 0 are easy to confuse when a password has to be read aloud or copied by hand. Turn the option off if the password only ever gets pasted.

Bookmark this page — the tool keeps working offline, and your settings stay in this browser. Built by Dynamb Technologies, who make software for a living.