Data & developer tools Security

Password Generator

Create strong random passwords and PINs to match any site's rules. They're generated on this device and never stored.

Workspace

Generate a password

Runs locally in your browser. Passwords come from your browser's secure random generator and are never uploaded, saved, or shared.
Your password
16 characters

    Very strong · about 103 bits of entropy from 89 possible characters

    Length

    Any length from 4 to 128 characters.

    Characters
    Rules
    Settings apply instantly. Nothing leaves this browser.
    Ready when you are.

    Video guide · 21 seconds

    Watch: generate a strong password

    No sound. Each step is captioned on screen and also written out in the guide below.

    A quick guide

    A strong password in three steps

    1. 01
      Pick a length

      Use a preset like 8 or 16, or any length up to 128. Longer is stronger.

    2. 02
      Choose characters

      Turn symbols or digits on or off to match the site's rules. Digits only makes a PIN.

    3. 03
      Copy it

      Paste it into your password manager or the sign-up form. Nothing is saved here.

    Example

    How length changes strength

    8 chars, letters + digits   ~47 bits  Fair
    16 chars, all types         ~103 bits Very strong
    6-digit PIN                 ~19 bits  Weak

    Each extra character multiplies the number of possible passwords, so adding length is the easiest way to add strength.

    Good to know

    Frequently asked questions

    How random are these passwords?

    Each character is picked with your browser's cryptographically secure random generator (crypto.getRandomValues), with every allowed character equally likely. The tool never falls back to a weaker source.

    Are my passwords stored or sent anywhere?

    No. They are generated in this tab and disappear when you leave or reset. There is no download button, so passwords aren't left in a file on your device.

    How long should a password be?

    For most accounts, 16 characters with all types is very strong. Use at least 12 if a site limits length, and prefer a password manager to remember them.

    Why avoid look-alike characters?

    Characters like l, 1, and I are easy to confuse when you have to read or type a password by hand. Avoiding them slightly reduces strength, which the entropy estimate shows.

    What does "bits of entropy" mean?

    It estimates how many guesses an attacker would need: each extra bit doubles the number. It is calculated as length × log₂(number of possible characters).