Skip to content

Random Password Generator

Generate strong random passwords with the length and character types you choose.

Sign in to favorite
passgen.sh

Password Generator

Generate strong random passwords with the length and character types you choose.

Starts in your browser. Instructions are below.

How to use Password Generator

  1. 01Set the length you need. Sixteen characters or more is a sensible default.
  2. 02Choose which character types to include: uppercase, lowercase, numbers and symbols.
  3. 03Copy the result, or generate again until you get one you are happy with.

About Password Generator

Passwords are generated in your browser using the operating system's cryptographic random number generator. Nothing is transmitted, logged or stored, so closing the tab is enough to make a generated password disappear.

Length protects you far more than complexity does. A sixteen-character password drawn from a mixed character set has vastly more possible combinations than an eight-character one with the same rules, and mixed-case-plus-symbols requirements mostly matter because they widen the pool each character is drawn from.

The strength meter estimates entropy in bits from the length and the size of the character set you selected. Under 50 bits is weak, 70 to 90 is solid for an everyday account, and above 100 bits is appropriate for password manager master passwords and encryption keys.

How strength is measured here

The strength label is based on entropy: password length × log2(number of possible characters). Each bit doubles the number of guesses an attacker needs. With every option on except look-alike characters, the generator draws from 70 characters, about 6.1 bits each. A 16-character password is about 98 bits; 12 characters is about 74 bits.

BitsLabel shownExample settings
Under 55Weak8 characters, all sets
55 to 74Reasonable12 characters, all sets
75 to 99Strong16 characters, all sets
100 and upVery strong16 characters with look-alikes allowed, or 17+

Characters come from your browser's cryptographic random number generator, and nothing is sent anywhere.

Common mistakes

  • Reusing one strong password on several sites. One breach then exposes all of them; use a password manager instead.
  • Making a random password shorter so it is easier to type. Adding length helps more than adding symbols.
  • Editing a generated password into a pattern (capital first, number last). That removes much of its randomness.

Frequently asked questions

Are these passwords sent to a server?
No. They are created in your browser and never leave your device.
How long should a password be?
At least sixteen characters for important accounts. Longer is better, especially if you store it in a password manager.
Should I exclude similar-looking characters?
Only if you will type the password by hand. Excluding characters slightly reduces strength.

No spam. Unsubscribe anytime.

Related tools and tools