Free Online Password Generator

Aim for at least 16 characters, which is what CISA recommends. With all four character sets on, 16 random characters give about 103 bits of entropy, rated Strong here. The default of 20 gives about 129 bits.

Each character comes from crypto.getRandomValues, the secure random number source built into your browser. Math.random is never used. Each random number is mapped to a character with a tiny bias, about one in 90 million, far too small to help anyone guess.

Each character is drawn at random from all the sets you ticked, so one type can be missing by chance. In our test, about half of 8-character passwords and 1 in 11 at 20 characters lacked a set. Click Generate again until the site's rules are met.

It uses 26 symbols: ! @ # $ % ^ & * ( ) - _ = + [ ] { } | ; : , . < > ?. Spaces, quotes, backslash, slash, tilde and backtick are never used. If a site rejects symbols, turn the Symbols box off and add four characters to the length.

It estimates entropy from your settings: log2 of the pool size times the length. Under 40 bits is Weak, 40 to 59 Fair, 60 to 79 Good, 80 and up Strong. It rates the settings, not the exact characters, and shows for single passwords only.

Yes. Type a number from 2 to 50 in the Bulk Generate box and click the button next to it. Every password uses the same length and sets. Copy All puts the list on your clipboard, one password per line, ready for a spreadsheet or seed file.

No. Passwords are made in your browser tab, kept only in memory and gone when you close it. Nothing is saved to cookies or local storage. Analytics record Generate and Copy clicks and how long a run took, but never a password.

Often, yes. A 16-character lowercase password has about 75 bits of entropy, while an 8-character password with all four sets has about 52. Length adds more than variety, which is why the slider goes up to 128.

Yes. Random passwords are hard to remember, so save each one in a password manager, or your browser's built-in one, as soon as you copy it. Use a different password for every account so one leak doesn't expose the rest.

The box corrects itself on every keystroke and keeps the count between 2 and 50. Deleting the number jumps it to 2, so typing 10 can end up as 20. Use the up and down arrows on the box, or your arrow keys, to set the count.

Not yet. The tool makes random character passwords only. There is no word-based passphrase mode and no option to drop look-alikes such as 0, O, 1 and l. If you will type the password by hand, a longer letters-only password is easier to read.