Password generator
Generate strong passwords from upper and lower case letters, digits and symbols, leaving out characters you exclude, and see their strength.
Loading…
Passwords are generated in this page and are not uploaded or stored.
About this tool
Create a strong random password for a new account, a Wi-Fi network, a database user or a password manager entry. Choose the length and which kinds of characters to use, and generate several at once so you can pick one.
Passwords can be 4 to 128 characters long, up to 100 at a time. You can leave out characters a site does not accept and look-alikes such as 0 and O, and the page estimates the strength in bits. Passwords are made in your browser and are not uploaded or stored.
How to use it
- Tick the kinds of characters to use: “Upper case (A–Z)”, “Lower case (a–z)”, “Digits (0–9)” and “Symbols”. All four are on by default.
- Set the “Length” (4 to 128, 16 by default) and “How many” (1 to 100, 5 by default).
- Type any characters you do not want into “Leave out these characters”. “Avoid look-alikes (0 O o 1 l I |)” is on by default.
- Check the strength shown, select “Generate passwords”, then “Copy” or “Download” the results.
Common questions
How are the passwords randomised?
Each character is picked with the browser’s crypto.getRandomValues, a cryptographic random generator, using rejection sampling so every allowed character is equally likely. The characters are then shuffled.
Will every kind of character I ticked appear?
Yes. Each ticked kind appears at least once in every password. If your exclusions remove every character of a kind, that kind is skipped.
Can I exclude characters that are easy to confuse?
Yes. “Avoid look-alikes (0 O o 1 l I |)” removes those seven characters and is on by default. Use “Leave out these characters” for anything else, such as symbols a site rejects.
How is the strength worked out?
It is estimated as length × log2(number of allowed characters), in bits. Under 40 bits is “Weak”, under 60 “Fair”, under 80 “Strong”, and 80 or more “Very strong”.
Which symbols are used?
The “Symbols” set is !@#$%^&*()-_=+[]{};:,.<>?/~ and the page lists it while the option is ticked. Remove any a site does not allow with “Leave out these characters”.
Related tools
UUID / GUID generator
Generate random (version 4) or time-ordered (version 7) UUIDs in bulk, in upper or lower case, with or without hyphens or braces.
Random number generator
Draw random integers or decimals in a range, with or without repeats, from the browser’s cryptographic generator.
QR code and barcode generator
Make QR, Data Matrix, PDF417, Aztec, Code 128, Code 39, Code 93, EAN, UPC-A, ITF or Codabar images as PNG or SVG, one code or one per line.
Key pair generator
Generate RSA, ECDSA (P-256, P-384, P-521), Ed25519 or SM2 key pairs as PEM in PKCS #8 or traditional form, for JWT, TLS or encryption tests.
Text to image
Render text as a PNG, JPEG or WebP image with your font size, colours, padding, alignment and wrap width. Uses the fonts installed on this device.
URL batch generator
Generate a list of links from a template: (*) becomes a number from an arithmetic or geometric sequence, with zero padding, or a letter.