How to use Password Generator
- Choose Random password, Passphrase or PIN.
- Set the length and pick which characters to include. A new password appears instantly.
- Click Copy, or press the refresh button for another. Open Generate several at once for a list.
About this tool
Passwords are made with your browser's cryptographically secure random number generator (crypto.getRandomValues), the same source used for encryption keys. Each character is picked with equal probability, and nothing is sent to a server or saved.
Strength is measured in bits of randomness. Each bit doubles the number of guesses needed. A 16-character password using all four kinds of character has about 104 bits, far beyond what any attacker can try. The crack-time estimate assumes 10 billion guesses a second, which is what a powerful offline attack can manage against a weakly protected password database.
Passphrases join random everyday words, like Comet-Velvet-Harbor-Tulip42-Lamp. They are easier to type and remember than a jumble of symbols, and five or six words are very strong.
The PIN option skips the codes people guess first, such as 0000, 1111 and 1234.
Questions and answers
Is it safe to generate a password online?
Here, yes. The password is generated by your own browser and never leaves your device. You can even disconnect from the internet after the page loads and it still works.
How long should my password be?
At least 12 characters for everyday accounts and 16 or more for email, banking and password managers. Length matters more than complexity.
Are passphrases secure?
Yes, when the words are chosen at random, as they are here. Five or six random words give more than 50 bits of randomness, and adding a number pushes that higher.
How should I remember all these passwords?
Use a password manager. Then you only need to remember one strong passphrase, and every site can have its own unique password.