How long should a password be?

For a random password, 16 characters with all four sets is very strong for almost any account, and 12 is a reasonable minimum. For a master password you must remember, use a passphrase of at least 5 or 6 random words.

Is this generator secure?

Yes. Passwords are made in your browser using the cryptographically secure random number generator, with a method that avoids bias, and they never leave your device. You can disconnect from the internet and it still works.

Entropy measures how unpredictable a password is, in bits. Each extra bit doubles the number of guesses needed. A password with 80 bits or more is beyond realistic guessing attacks.

Why use a passphrase?

A passphrase of random words is much easier to type and remember than a string of symbols, and five or six words from a list of 7,776 give about 65 to 78 bits of entropy.

Password Generator

Create strong random passwords and memorable passphrases with a strength meter.

Length: 16

Characters to useLowercase (a-z)Uppercase (A-Z)Digits (0-9)Symbols

Exclude look-alike characters (0 O o 1 l I |)At least one of each chosen set

Symbols to use

Exclude these characters

How many (1 to 50)

Created in your browser with its secure random number generator. Passwords are never sent anywhere or saved; only your option choices are remembered.

Runs in your browser. Nothing is uploaded.

Remember my last input

What is Password Generator?

A password generator creates passwords that are random, so nobody can guess them from your name, your habits or a list of common passwords. People are poor at being random: we choose pet names, birthdays and keyboard patterns, and attackers try those first. A truly random password removes that weakness, and the longer it is, the more guesses it would take to find.

This password generator makes two kinds. A random-character password lets you choose the length from 4 to 128 and which sets to use: lowercase, uppercase, digits and symbols. You can leave out look-alike characters such as 0 and O, exclude any characters that cause trouble on a particular site, choose exactly which symbols are allowed, and require at least one character from every set. A passphrase joins random words from the EFF long word list, such as correct-horse-battery-staple style phrases, which are easier to type and remember at the same strength. A strength meter shows the exact entropy in bits and a plain-language rating, taking the effect of the options into account.

Passwords are created in your browser with the secure random number generator built into it, using unbiased selection so every character is equally likely. Nothing is sent to a server, the passwords are never stored, and only your option choices are remembered for next time. For the best protection, use a different generated password for every account and keep them in a password manager.

How to use

Choose Random characters or Passphrase. A password appears straight away.
Adjust the length and the character sets, or the number of words and the separator. A new password is made each time you change an option.
Use the optional settings to exclude look-alike or specific characters, pick your own symbols, or skip the one-of-each rule.
Check the strength meter, click Generate for another, or set a count to make a list.
Click Copy next to the password you want, or Copy all for a list.

Example

Input

Length 16, lowercase, uppercase, digits and symbols

Output

k7#Qv2mZ!pR9xT4w
Strength: Very strong, 103 bits of entropy

Frequently asked questions

How long should a password be?: For a random password, 16 characters with all four sets is very strong for almost any account, and 12 is a reasonable minimum. For a master password you must remember, use a passphrase of at least 5 or 6 random words.
Is this generator secure?: Yes. Passwords are made in your browser using the cryptographically secure random number generator, with a method that avoids bias, and they never leave your device. You can disconnect from the internet and it still works.
What is entropy?: Entropy measures how unpredictable a password is, in bits. Each extra bit doubles the number of guesses needed. A password with 80 bits or more is beyond realistic guessing attacks.
Why use a passphrase?: A passphrase of random words is much easier to type and remember than a string of symbols, and five or six words from a list of 7,776 give about 65 to 78 bits of entropy.