Password generator · client-side
Free Strong Password Generator
Generate a random password in one click. Pick a length, choose the characters, copy. Everything happens on your device.
••••••••••••••••
Same settings as above. In the .csv, a password that starts with = + - or @ gets a leading ' so spreadsheets show it as text - remove it if you import elsewhere, or use the .txt, which is never altered.
Generated in your browser with crypto.getRandomValues(). Nothing is sent or stored. Verify it
What Makes a Password Strong?
A strong password is one an attacker cannot guess in any realistic amount of time. Three things decide that, in this order:
- Length. Every extra character multiplies the number of possible passwords. A 16-character random password has about 1031 possibilities; an 8-character one has about 1015. Length beats complexity every time.
- Randomness. "Summer2026!" satisfies most complexity rules and still falls to a dictionary attack in seconds, because people pick passwords in predictable ways. A password drawn uniformly at random from a large character set has no pattern to exploit.
- Uniqueness. A password reused on two sites is only as strong as the weaker site's database. Use this as a new password generator for every sign-up and keep the results in a password manager.
The readout under the generator shows the password's entropy in bits - a direct measure of how many guesses a brute-force attack needs. Each bit doubles the work. Aim for at least 80 bits for accounts that matter; the default 16-character password gives you about 105. Want the maths? The password entropy calculator shows the formula and crack times against different attackers.
A strong random password generator handles all three for you: it picks every character uniformly at random, defaults to a safe length, and gives you a fresh password each time.
How This Password Generator Works
This random password generator runs entirely in your browser. When you click regenerate, the page asks your operating system's cryptographically secure random number generator for fresh random values through crypto.getRandomValues(). There is no server-side generation, no fallback to Math.random(), and no network request of any kind.
Each character is chosen with rejection sampling, which removes the small "modulo bias" that naive generators have, so every allowed character is exactly equally likely. When you require uppercase, lowercase, numbers and symbols, every type is guaranteed to appear without putting any of them in a predictable position.
Every online tool claims to be the best free password generator. A good password generator should let you check the claim instead - and you do not have to take our word for it:
- Go offline. Load this page, switch off Wi-Fi, keep generating. It still works.
- Watch the network tab. Open your browser's developer tools. Generating, copying and bulk downloading produce zero requests.
- Read the source. The whole generation module is a few short files, published on this site, and the page's Content Security Policy forbids any script that is not ours.
After you copy a password, the clipboard is overwritten after 30 seconds - the countdown is shown under the password. That shortens the window in which another app can read it, though clipboard-history tools may still keep a copy. Full verification steps.
Password vs Passphrase vs PIN
Pick the format that fits where you will use it:
| Format | Best for | Example | Entropy |
|---|---|---|---|
| Random password | Anything stored in a password manager | q7#Vt2mX!pR9eZ4k | ~105 bits |
| Passphrase | Passwords you must type or remember: your manager's master password, device login | relic-uncover-mango-shrug-dawn-petal | ~78 bits |
| PIN | Bank cards, phones, door codes - numeric-only fields with lockouts | 5 8 0 3 1 7 | ~20 bits |
If you only need something easy to remember, a passphrase gives you comparable strength with far less typing pain. If a site limits you to letters and numbers, switch symbols off and add two characters of length to make up the difference: 18 letters and digits beat 16 characters with symbols.
Generate Many Passwords at Once
Setting up a classroom, onboarding a team, seeding test accounts or rotating service credentials? Generate password lists of 1 to 10,000 entries and download them as a .txt file (one password per line, ideal for import scripts) or a .csv file for a spreadsheet. Every password in the batch uses the same length and character settings as the generator above.
The file is assembled in your browser and handed to your downloads folder directly - it is never uploaded, so a batch of 10,000 credentials never exists anywhere but your machine. In the CSV, a password that begins with =, +, - or @ gets a leading apostrophe so a spreadsheet shows it as text instead of running it as a formula. The apostrophe is not part of the password - use the .txt file when a script needs the exact values.
Common Lengths: 12, 15 and 16 Characters
Use the preset chips to jump to the lengths people ask for most. As a rule of thumb, with all four character types enabled:
- 8 characters (~51 bits): the old minimum many sites still accept. A GPU rig cracks it in about four hours if the site stored it with a fast hash. Use only when a system forces it.
- 12 characters (~78 bits): a sensible floor for everyday accounts. A password generator 12 characters long is what most security guidance now recommends as a minimum.
- 15 characters (~98 bits): the 15 character password generator setting matches the NIST minimum for single-factor admin passwords in many enterprise policies.
- 16 characters (~105 bits): our default. Comfortably beyond any brute-force attack for the foreseeable future.
- 20-32 characters: use it as a long password generator for Wi-Fi keys, service accounts and API credentials that are pasted, never typed.
Password Generator FAQs
Is it safe to use an online password generator?
It is safe when the password is generated on your device and never transmitted - and when you can check that. This generator uses your browser's secure random source, makes no network requests, keeps working offline, and publishes its source. Try it: load the page, go offline, and keep generating. How to verify.
Do you store or see the passwords I generate?
No. There is no server code involved in generating, copying or downloading, and we have no database of passwords. The site's analytics measure page usage only, never the values you generate. The Content Security Policy blocks every third-party script except those named analytics providers.
How long should my password be?
At least 12 characters for everyday accounts and 16 or more for email, banking and your password manager. Length contributes more to strength than adding symbols does. If you must remember it, use a 5-6 word passphrase instead.
What does "entropy in bits" mean?
It is the base-2 logarithm of the number of equally likely passwords the generator could have produced with your settings. 80 bits means an attacker needs on average 279 guesses. Each extra bit doubles the work. The entropy calculator explains it step by step.
How is the crack time calculated?
It assumes an offline attacker with a fast GPU rig making 100 billion guesses per second against a leaked hash, and reports the average time to find your password (half the keyspace). Real attacks against sites that use slow hashes like bcrypt are thousands of times slower; online attacks are slower still.
Why does the clipboard clear after 30 seconds?
Other apps and websites you use afterwards can read the clipboard. Overwriting it after 30 seconds limits that exposure. It cannot remove a copy that a clipboard-history manager has already saved, so check your OS settings if you use one.
What does "No look-alikes" do?
It removes characters that are easy to confuse when reading or typing a password by hand: lowercase l, uppercase I, the digit 1, uppercase O, lowercase o, zero, and a few quote-like symbols. It slightly reduces entropy per character, which the readout reflects.
Can I generate a password without symbols?
Yes. Switch off "Symbols" to get a password with letters and numbers only. To keep the same strength, add two characters of length - the entropy readout updates as you change settings.
Is this password generator free?
Yes. This password creator is free, with no account, no limits on how many passwords you generate and no upsell inside the tool. Bulk downloads of up to 10,000 passwords are free too, so it doubles as a password maker for whole teams.
Should I use a password manager?
Yes. A generator solves "make a strong password"; a manager solves "remember hundreds of them". Generate here, save in your manager.
Related tools