Generate a strong password

Strong passwords and passphrases

A password generated on someone else's server is a password you should not use. This one is produced by your browser's cryptographic random number generator and never touches the network. Choose a long random string for a password manager, or a memorable passphrase of real words for the handful you have to type yourself.

Loading the tool…
How to use it
  1. 01Choose a random string or a word-based passphrase.
  2. 02Set the length and which character types to include.
  3. 03Check the strength reading.
  4. 04Copy it into your password manager.
Questions
Could someone see the password I generate?
No. It is created by the browser's crypto API on your machine and never sent anywhere, so there is nothing in transit and nothing in a log.
How long should a password be?
Sixteen characters or more for anything that matters, and never reused between sites. Length beats complexity: a long passphrase is stronger than a short scramble of symbols.
Random string or passphrase?
Random for anything a password manager fills in for you. A passphrase of four or five words for the few you have to type by hand — a laptop login, or the manager's own master password.
Does the tool remember what it generated?
No history, no storage. Once the tab closes, the password only exists where you saved it.
Does it work on a phone?
Yes. Tap to copy and paste it straight into the signup form.
Related
Runs in your browser · Nothing uploaded · No signup