Password generator

Strong random passwords made on your device, never sent anywhere.

Strength: Very strong (103 bits)

    How it works

    Each character is picked at random from the types you choose, using your browser's cryptographic random number generator (the same one used for secure connections). At least one of each chosen type is included, then the order is shuffled.

    Strength is measured in bits: each bit doubles the number of guesses needed. 16 characters from all four types is about 103 bits, far beyond what can be guessed.

    Passwords are made on your device. They're never sent anywhere or saved, and this page makes no network requests while you use it.

    Worked example

    A 12-character password using only lower-case letters has 26¹² combinations (about 56 bits). Adding upper case, digits and symbols to the same length gives about 77 bits: around 2 million times more combinations.

    Questions

    How long should a password be?

    At least 12 characters for most accounts, and 16 or more for important ones like email and banking. Length matters more than complexity.

    How do I remember these?

    Use a password manager: it stores a different strong password for every site so you only remember one. For that one, a long passphrase of random words is easier to remember.

    Why avoid ambiguous characters?

    Characters like 0 and O, or 1, l and I, are easy to mix up when reading a password out or typing it from paper. Leaving them out costs very little strength.