Password Generator

Introduction

This password generator creates strong, unpredictable passwords in one click. It's a random password generator that lets you set the length, choose letters, numbers and symbols, and skip look-alike characters like O and 0. Pick your settings and the tool fills the box with a fresh password straight away.

Weak, reused passwords are still the easiest way into most accounts, and people are bad at inventing random ones. Let the computer do it. Nothing is sent to a server, nothing is saved, and there's no account to create.

Why use this free random password generator

Here's what's actually true about this tool:

• Secure randomness. Characters are picked with crypto.getRandomValues, the browser's cryptographic random source, not Math.random.
• No modulo bias. The code throws away out-of-range random values, so every character in your chosen set is equally likely.
• Your rules, your length. Any length from 4 to 128, four character types and an option to skip look-alike characters.
• Batch mode. Generate 1, 5, 10 or 20 passwords at once, useful when you're setting up several accounts.
• Strength estimate. A live bar shows an entropy estimate in bits, based on your length and character set.
• Private by design. The page makes no network requests while you generate, and it doesn't store passwords in cookies or local storage.
• No signup, no ads inside the tool. It works the moment the page loads.

How to generate a password: step-by-step guide

Step 1: Choose a length

Drag the slider or type a number. Length does most of the work: each added character multiplies the number of possible passwords. Sixteen is a sensible everyday default. Go to 20 or more for email, banking and your password manager's master password.

Step 2: Choose characters

Leave all four types ticked unless a site forbids something. If a site rejects symbols, untick Symbols and add a few characters of length. Tick Easy to read if you'll ever read the password aloud or type it from a screen. If a site demands lowercase-only text, untick the other types here rather than converting the result with a case converter, which would weaken it.

Step 3: Generate and check strength

Click Generate password for a new result. The bar below the box rates it Weak, Fair, Strong or Very strong. The rating comes from entropy, a measure of how many guesses an attacker would need on average. Aim for Strong or better, and Very strong for important accounts.

Step 4: Copy it and store it safely

Click Copy and paste the password straight into the sign-up or change-password form. Then save it in a password manager. Don't keep it in a note, a spreadsheet or an email to yourself.

Which settings should you pick?

For background on why length beats complexity rules, see NIST's digital identity guidelines (SP 800-63B).

Settings, character sets and limits

The strength figure assumes every character is picked independently. Guaranteeing one character from each selected type lowers the true value by a very small amount, so treat the number as a close estimate. With all four types on and a length of 16, the estimate is about 102 bits.

Who uses a password generator: practical use cases

• Anyone opening a new account: create a unique password instead of recycling an old one.
• People reacting to a breach notice: replace the exposed password with a fresh random one.
• Home users setting up a router: generate a long Wi-Fi password without look-alike characters, so it's easy to type on a TV or console.
• Families sharing streaming or utility accounts: make one strong password and give it only to the people who need it.
• Small business owners and IT admins: produce temporary passwords for new staff in batches of 5, 10 or 20.
• Developers and testers: create passwords for staging databases, test users and local services.
• Students and freelancers: secure school portals, client dashboards and cloud storage without reusing a favorite phrase.

Key features and benefits

• Cryptographically secure randomness from the Web Crypto API.
• Length from 4 to 128 with a slider and a number box.
• Four character types plus a look-alike filter.
• Batch generation of up to 20 passwords.
• Live entropy-based strength bar with a text label.
• Copy and download buttons, plus Reset / Start over.
• Keyboard accessible, labeled controls, large tap targets and a screen-reader status message.
• Light theme with automatic dark mode.
• Friendly messages for invalid length or no character type selected.
• No signup and no external requests.

Expert tips and common mistakes

Never reuse a password

This is the mistake that causes the most damage. When one site leaks its database, attackers try the same email and password on banks, email and shopping sites. A unique password per account limits a breach to one account.

Don't "improve" a generated password to remember it

Swapping a few letters for something familiar, or tacking on your birth year, cuts the randomness you just paid for. If you can't remember it, that's normal. Store it in a password manager and let the manager remember it.

Don't use predictable patterns

Things like a word plus a year plus an exclamation mark ("Summer2026!") follow patterns attackers try first. Random characters have no pattern to guess.

Match the site's rules, then add length

Some sites cap length or ban certain symbols. Read the rules, untick what's not allowed here, and make up the difference with extra characters. Pasted a password and want to confirm its length? The Word & Character Counter shows an exact count.

Turn on two-factor authentication

A strong password is the first layer. Where a site offers two-factor authentication, use it for email, banking and any account that can reset others.

Treat security answers like passwords

If a site asks security questions, true answers are easy for others to find. Use random text for those answers too, and store them with the password.

Be careful where the password lands

Your clipboard can hold the password until you copy something else. Paste it, then copy a harmless word to overwrite it. Avoid screenshots, chat messages and plain text files. Generate on a device you trust.

Privacy and security

Passwords are generated in your browser and are never uploaded. The generator is plain JavaScript that calls crypto.getRandomValues, which MDN documents as the browser's cryptographically strong random source. The page loads no external scripts, fonts or images, makes no network requests when you generate, and doesn't write passwords to cookies or local storage. Refreshing or closing the tab clears them.

Some risks sit outside this page. Malware or a keylogger on your device can see what you type or copy. Browser extensions can read page contents. A clipboard manager may keep what you copy. The Download .txt button saves an unencrypted file, so delete it after you've stored the passwords properly. Standard hosting logs may record that the page was visited, but they never see the passwords created in your browser.

This password generator vs. alternatives

Each option has a place. If you already use LastPass or another password manager, its built-in generator is a good choice, because it can create and save the password in one step. This page is handy when you want a quick password without opening anything, you're on a device where your manager isn't installed, or you simply want to see the options and how the result is built.

The best routine combines them: generate a long random password, then keep it in a manager so you never have to remember or reuse it.

Troubleshooting

"Choose at least one character type" appears

All four checkboxes are off. Tick at least one type and the password will generate again.

A website rejects my password

The site probably bans certain symbols or sets a maximum length. Untick Symbols, shorten the length to the site's maximum, or both. Then generate again.

Copy doesn't work

Some browsers block clipboard access in certain settings. The tool tries a fallback. If it still fails, click inside the box, press Ctrl+A (Cmd+A on a Mac), and copy with the keyboard.

My length was changed

Lengths below 4 or above 128 are adjusted to the nearest allowed value, and a message tells you so.

The strength says Fair or Weak

Your password is too short or uses too few character types. Raise the length to 16 or more and turn on all four types.

I can't tell O from 0 or l from 1

Tick Easy to read and generate again. The new password avoids I, l, 1, O and 0.

I downloaded a file and want it gone

Delete the .txt file from your downloads folder and empty the trash or recycle bin. Better yet, save passwords in a password manager and skip the file.

I want a password I can say out loud

This tool makes random character strings, not word-based passphrases. Use a shorter length with look-alikes excluded, or a password manager that supports passphrases.

Glossary

Entropy

A measure of unpredictability, counted in bits. More bits means more possible passwords and more guesses for an attacker.

Brute-force attack

Trying many possible passwords until one works. Longer, random passwords make this impractical.

Credential stuffing

Using email and password pairs leaked from one site to try to log in elsewhere. Unique passwords stop it.

CSPRNG

A cryptographically secure pseudo-random number generator, the kind of random source that's safe for security uses.

Password manager

An app that creates, stores and fills in passwords so you only remember one master password.

Two-factor authentication

A second proof of identity, such as a code from an app, required in addition to your password.

Hash

A one-way fingerprint of data. Websites should store hashes of passwords, not the passwords themselves. You can experiment with the Hash Generator.

Frequently asked questions

Generate a strong password now

A strong password takes a few seconds with the right tool. Use this free password generator to set a length, pick your characters and copy a random result you couldn't guess yourself. Make a different one for every account, and keep them in a password manager. Scroll up, click Generate password, and secure your next login. Then check the related tools below.

Related tools

• Hash GeneratorCreate text hashes for checks and tests
• QR Code GeneratorTurn text and links into QR codes
• Case ConverterSwitch text between upper and lower case
• Word & Character CounterCount characters, words and sentences
• JSON FormatterFormat and validate JSON data