Strong password generator
Random passwords or word passphrases, generated on your device with secure randomness.
Runs on your device. Nothing is uploaded.
Time to try every combination at 10 billion guesses a second (an assumption for an offline attack):
How it works
- Choose random characters or a passphrase.
- Set the length or word count, then the character sets or separator.
- Copy one of the five results into your password manager.
Questions
Is a generated password safe to use?
It is as strong as its length and randomness. These are made with crypto.getRandomValues, the browser’s cryptographic random source. They are never sent or stored, and closing the tab discards them.
What do the strength words mean?
They come from the entropy estimate, the bits of randomness in the password: under 50 is weak, 50 to 69 fair, 70 to 99 strong, and 100 or more very strong. The time to guess assumes 10 billion guesses a second, a rate assumed for an offline attack.
Random characters or a passphrase?
Random characters are the hardest to guess but the hardest to type. A five-word passphrase from a 1,024-word list gives 50 bits, and each extra word adds 10. Use a passphrase when you must type it often, such as a device login.
Should I reuse a generated password?
No. Use a different password for each account and keep them in a password manager, so you only need to remember one master password.