🔐 Password Generator
Generate cryptographically secure random passwords — nothing stored, nothing transmitted.
Our free Password Generator creates truly random passwords using your browser's cryptographic random number generator (window.crypto.getRandomValues) — the same standard used in security applications. Choose your length and character types, generate, and copy with one click. Nothing is ever sent to any server.
What Makes a Password Strong?
Password strength is measured by entropy — the number of possible combinations an attacker would have to try. Two factors determine entropy:
- Length: The most important factor. Each additional character multiplies the search space by the size of the character set.
- Character set size: Using uppercase + lowercase + numbers + symbols (94 characters total) vs lowercase only (26 characters) dramatically increases combinations.
12-char, 94-char set: 94¹² = 475 quintillion combinations
8-char, 94-char set: 94⁸ = 6.1 quadrillion combinations
Modern hardware can test billions of passwords per second for weak hashing algorithms. An 8-character password can be cracked in hours. A 12-character random password would take millions of years at the same rate.
Recommended Password Lengths
- Minimum (low-risk accounts): 12 characters
- Standard (most accounts): 16 characters
- High security (email, banking, password manager): 20+ characters
- Master password for password manager: 20+ characters, memorizable passphrase
Using a Password Manager
You should use a different random password for every account — but no one can memorize dozens of 16-character random strings. The solution is a password manager. You remember one strong master password; the manager generates, stores, and auto-fills unique passwords for every site.
- Bitwarden: Free, open-source, fully audited, zero-knowledge encryption — the best free option
- 1Password: $3/month — polished interface, travel mode, family sharing
- Built-in managers: Apple Keychain, Google Password Manager, and browser managers are good starting points
Two-Factor Authentication
Even a strong password can be stolen through phishing. Two-factor authentication (2FA) adds a second layer — even with your password, an attacker also needs your phone or security key. Enable 2FA on your most important accounts first: email, banking, and your password manager. Authenticator apps (Google Authenticator, Authy) are more secure than SMS codes.
🔒 Generate a secure password instantly — free, private, nothing stored.
Open Password Generator →Frequently Asked Questions
Is this password generator safe to use?
Yes. Our generator runs entirely in your browser using window.crypto.getRandomValues() — cryptographic randomness that is not predictable. No passwords are transmitted to our servers, logged, or stored anywhere. The generated password exists only in your browser until you copy it.
Should I use special characters in passwords?
Yes — special characters increase the character set size from 62 (letters + numbers) to 94, which significantly increases the number of possible combinations. However, some sites restrict special characters. If a generated password is rejected, simply generate a new one.
How often should I change passwords?
Current NIST guidelines no longer recommend routine periodic password changes unless there is evidence of compromise. Instead, focus on: using unique passwords for every site, enabling 2FA, and checking if your accounts have appeared in known data breaches (use haveibeenpwned.com).