Password Generator
Create a strong, random password — or a memorable passphrase — in a click. The generator runs entirely in your browser using your device's secure random number generator, so the password is created on your machine and never sent anywhere. Scroll down to the generator tool, set your options, and copy the result straight into your password manager.
Interactive Security Tools
All analysis happens locally in your browser. We never store or transmit your data.
Password strength tester
Enter a password to analyze its security strength.
Estimated offline crack time: —
Passphrase checker
Test the strength of word-based passphrases (e.g. "correct horse battery staple").
Words detected: 0
Estimated offline crack time: —
Password generator
Create strong, random passwords with custom options.
How the generator works
Every password is built with crypto.getRandomValues — your browser's
cryptographically secure random source — not a predictable Math.random().
That means the output is genuinely unpredictable, which is the whole point of a
strong password. Nothing is generated on a server and nothing is logged; close the
tab and the password is gone unless you saved it.
Random password or passphrase — which should you use?
Random character passwords (like k7$Rp2!vQx9m) pack the
most strength into the fewest characters, which is ideal when a site limits length or
when you'll never type it by hand — your password manager fills it in for you.
Passphrases (like Copper-Valley-Ember-Rowan-42) trade a
little density for something a human can actually remember and type. They're perfect
for the handful of passwords you must know by heart — above all, the
master password to your password manager. Four or more random,
unrelated words are long enough to make brute force hopeless while staying memorable.
Flip on "Passphrase mode" in the tool above to switch between the two. Not sure how strong your choice is? Check it with the password strength test.
How to actually use a generated password
- Generate a long, unique password for the account (aim for 16+ characters, or a 4–5 word passphrase).
- Save it in a password manager so you never have to remember or retype it.
- Turn on two-factor authentication for anything important — email, banking, the password manager itself.
- Never reuse it. The manager makes "unique everywhere" effortless, which is the only reason people actually do it.
The one password worth memorising is your manager's master passphrase. Here's how to build one that holds.
Is this generator safe and private?
Yes. The generator creates passwords locally in your browser and never transmits them. There's no account, no logging of what it produces, and no storage. You can confirm this in your browser's developer tools: generating a password makes no network request. For maximum safety, generate the password directly into the field where you need it, or straight into your password manager, rather than leaving it sitting on screen.
Frequently asked questions
How long should my password be?
At least 16 characters for a random password, or 4–5 words for a passphrase. For your most critical accounts, longer is always better — length is the single biggest factor in resisting modern cracking.
Are these passwords truly random?
They're generated with your browser's cryptographically secure random number generator, which is designed exactly for this. That's far stronger than anything a human would "think up," which is always more predictable than it feels.
Do I need symbols and numbers?
They help, but length matters more. A long passphrase without a single symbol can be far stronger than a short password full of them. Use symbols to satisfy sites that demand them — not as your main source of strength.