Password Generator

Click Generate to create a password

Strength: —

Password Length 16 characters

664

Uppercase A-Z

Lowercase a-z

Numbers 0-9

Symbols !@#$%^&*

Exclude ambiguous characters 0, O, l, I, 1

Password Security Tips

Use at least 16 characters

Longer passwords are exponentially harder to crack. Aim for 16+ characters.

Never reuse passwords

Use a unique password for every account. Use a password manager to store them.

Enable Two-Factor Authentication

Even strong passwords can be stolen. 2FA adds an extra layer of protection.

Free Secure Password Generator

Generate cryptographically strong, random passwords instantly. Unlike simple random generators, we use the Web Crypto API — the same standard used by banks and security software — ensuring true randomness that cannot be predicted. Passwords are generated entirely in your browser and never transmitted.

Features

Cryptographic Randomness

Uses window.crypto.getRandomValues() — the gold standard for secure random generation.

Fully Customisable

Control length (6–64 chars), character sets, skin tones and exclude ambiguous characters.

Passphrase Mode

Generate memorable passphrases like "Brave-Ocean-Tiger-91" — secure yet easy to recall.

PIN Generator

Generate numeric PINs of 4, 6, 8 or 10 digits for device locks and codes.

Bulk Generation

Generate 10 passwords at once to pick your favourite or use across multiple accounts.

Never Transmitted

Passwords are generated and displayed locally. We never see, log or store them.

Who Uses This Tool?

EveryoneSecure your accounts with unique passwords for every website.

IT AdministratorsRapidly generate temporary passwords for new employee accounts.

DevelopersGenerate API keys, tokens and secrets during application development.

Security AuditorsTest password policies and strength against various character combinations.

Common Questions

How long should my password be?

A minimum of 16 characters is recommended for important accounts. 12 characters with mixed types provides basic security, but 20+ is ideal for banking and email.

What makes a password truly secure?

Length is the most important factor. A 20-character lowercase-only password is stronger than a 10-character mixed-case one. Combine length with variety for best results.

Should I use a passphrase?

Passphrases like "Purple-Tiger-Dance-92" are easier to remember and often stronger than short complex passwords. They're ideal for master passwords.

How often should I change passwords?

Only change passwords when there's a reason (data breach, shared access). Using unique passwords everywhere matters more than regular changes.

Pro Tip

Use a password manager (Bitwarden, 1Password, or built-in browser manager) to store your generated passwords. This lets you use unique 20+ character passwords everywhere without needing to remember them.

Did You Know?

123456

Most Common Password (2024)

"123456" remains the world's most common password. It appears in over 4.5 million known data breaches. The second most common is "password" itself.

0.03 sec

To Crack a 6-char Password

A modern GPU can crack a 6-character password using brute force in under 0.03 seconds. A 12-character random password takes over 200 years with the same hardware.

86%

Breaches Involve Weak Passwords

According to Verizon's Data Breach Report, 86% of data breaches involve stolen or weak credentials. Strong, unique passwords per site are the single most effective protection.

Password Strength Guide

Length	Character Types	Entropy	Time to Crack	Rating
6 chars	Letters only	~28 bits	Milliseconds	❌ Terrible
8 chars	Upper+Lower+Num	~47 bits	Hours	⚠️ Weak
12 chars	All types	~78 bits	Centuries	✅ Good
16 chars	All types	~104 bits	Millennia	✅ Strong
20 chars	All types	~131 bits	Impossible	✅ Excellent
4 words	Passphrase	~52 bits	Years	✅ Memorable

You May Also Ask

What is password entropy and why does it matter?

Password entropy measures how unpredictable a password is, expressed in bits. Higher entropy = harder to crack. A random 16-character password using uppercase, lowercase, numbers and symbols has ~105 bits of entropy — requiring trillions of years to brute-force. Entropy is determined by length × log2(character set size).

Should I use a password manager?

Absolutely yes. Password managers (Bitwarden, 1Password, KeePass) store unique 20+ character random passwords for every site. You only need to remember one master password. This eliminates the biggest password vulnerability: reusing the same password across multiple sites.

Are browser-saved passwords safe?

Browser password storage has improved significantly but has risks: if your device is compromised, all saved passwords are exposed. Browser passwords also don't sync well across all devices and apps. A dedicated password manager offers better encryption, cross-platform support and breach monitoring.

Common Mistakes

Substituting letters with numbers (p@ssw0rd)

Hackers' dictionaries include all common substitutions like @ for a, 0 for o, 3 for e. These patterns provide almost zero additional security.

Use truly random characters instead of predictable substitutions.

Using personal information in passwords

Birthdays, names, pet names, and favourite teams are the first things attackers try. Social media makes this information publicly available.

Use our generator for completely random passwords with no personal connection.

Reusing passwords across sites

When one site is breached, attackers try those credentials everywhere (credential stuffing). Millions of accounts are compromised this way daily.

Use a unique password for every account — a password manager makes this effortless.

10 Generated Passwords

Recent Passwords