Menu

Random password generator

Pick the length and what goes in. The password is made in your browser and never saved.

Your password is made in your browser.

Entropy: 102.8 bits

Each extra bit doubles the possible passwords.

Once copied, it can stay in the clipboard history of your phone or computer.

From 8 to 64.

What goes in

Symbols it uses: ! @ # $ % ^ & * ( ) - _ = + [ ] { } : ; , . ? / ~

How to use it

  1. Type how many characters you want, from 8 to 64.
  2. Choose what goes in: lowercase, uppercase, numbers or symbols.
  3. Don't like it? Tap "Generate another".
  4. Tap "Copy password" and paste it into the site or your password manager.

How it works

Your browser's cryptographic random number generator (crypto.getRandomValues) draws each character, with no modulo bias. If the password misses a kind you checked, the whole password is drawn again. That way every possible password is equally likely.

The bits count how many different passwords your options can produce, and the count is exact. Each extra bit doubles that number, and with it the guesses someone would need to find yours.

The password isn't saved or sent to a server. It never shows up in the page address, and reloading gives you a new one. Once copied, it can stay in the clipboard history of your phone or computer.

Example

With the starting options, 16 characters and all four kinds, the tool shows 102.8 bits. Each character comes from a pool of 87: 26 lowercase, 26 uppercase, 10 numbers and 25 symbols.

At 20 characters it shows 128.7 bits. Avoid look-alike characters and the pool drops to 82, so 16 characters show 101.3 bits.

Frequently asked questions

Are these passwords secure and truly random?

They're truly random, and the bits tell you how hard they are to guess. Each character comes from your browser's cryptographic random number generator, with no bias: every possible password is equally likely. More characters and more kinds of character add more bits.

Is the password saved or sent anywhere?

No. It's made in your browser and isn't saved or sent to a server. Once copied, it can stay in the clipboard history of your phone or computer.

What characters does the password generator use?

Letters without accents, the digits 0 to 9 and 25 symbols: ! @ # $ % ^ & * ( ) - _ = + [ ] : ; , . ? / ~ and curly braces. It leaves out the space, quotes, the backtick, the backslash and < > |. Some sites reject them.

What do the bits of a password mean?

They measure how many different passwords your options can produce. Each extra bit doubles that number: 60 bits means twice as many options as 59.

Can I make a longer password?

Yes, up to 64 characters. Each extra character adds bits. If a site caps the length, use the number it accepts.

Why avoid look-alike characters?

So you don't mix them up when you read or dictate the password. The option drops I, l, 1, O and 0, which look almost the same in many fonts. The bits drop a little, because there are fewer characters.

Updated