How to generate a password

The generator builds a random password on the spot, based on the options you tick. When the page opens, a first password is already waiting for you.

Drag the slider to choose the length, from 4 to 50 characters (the default is 12).
Tick the character types you want: uppercase letters, lowercase letters, numbers and symbols. At least one must stay ticked.
Click "Generate Password" as many times as you like until you are happy with the result.
Click "Copy Password" to send it to the clipboard, then paste it into the sign-up field or, even better, straight into your password manager.

What the tool offers

Adjustable length between 4 and 50 characters.
Four character groups: A-Z, a-z, 0-9 and the symbols !@#$%&*()_+-=[]{}|;:,.<>?.
At least one character from every ticked group. If you leave all four groups on, the password always contains an uppercase letter, a lowercase letter, a number and a symbol, which avoids rejection on sites that require that mix.
Strength indicator based on entropy, with the estimate in bits shown next to the label.
One-click copy.

How the strength indicator works

Entropy is estimated as length x log2(number of possible characters). The more bits, the more guesses an attacker would need to succeed by brute force. The ranges used are:

Less than 40 bits: very weak.
40 to 59 bits: weak.
60 to 79 bits: fair.
80 to 99 bits: strong.
100 bits or more: very strong.

In practice, 12 characters with all four groups ticked give about 77 bits (fair), and 16 characters reach about 103 bits. The estimate assumes the password was drawn at random, which is true here, but it only measures how hard it is to guess by trial and error. It does not protect against a breach of the website, phishing scams or reusing the same password across several services. Because guaranteeing one character from each group slightly narrows the possible combinations, the value shown is an approximation with a small difference.

Tips for better passwords

Prefer long passwords. For important accounts, such as email, banking and social networks, use 16 characters or more. Every extra character greatly increases the number of possible combinations.
A different password for every service. If one site leaks your data, the attacker tries the same password on the others. A password manager helps you store everything without relying on memory.
When a site does not accept symbols (this still happens on some bank and government systems), untick the option and make up for it by increasing the length.
A password to type on a TV or on someone else's phone? Untick the symbols and generate one with only letters and numbers, which is easier to type.
Turn on two-step verification whenever the service offers it. It protects you even if the password leaks.
Do not put the generated password in a shared document, email or message. Paste it directly where you will use it.

Privacy and how it works

The password is generated entirely in your browser, by a script on the page itself, and is not sent to or stored on any server or in the browser's storage. The draw uses the browser's cryptographic API (crypto.getRandomValues), discarding values that would cause bias, and the final order of the characters is shuffled with the Fisher-Yates method using the same random source. When you copy, the text goes only to your device's clipboard. Even so, remember that anything pasted to the clipboard can be read by other programs on the device; for critical accounts, the ideal is to store the password in a dedicated manager. The page shows ads; see the Privacy Policy.

Frequently asked questions

Are the generated passwords saved anywhere?

No. They exist only on screen while the page is open. When you reload or close it, the password is lost, so copy and store it before leaving.

How many characters should I use?

For most accounts, 12 to 16 is already reasonable. For your main email, banking and password manager, go longer. If the site imposes a limit, use the maximum it accepts.

Why does the indicator show "Very weak" for a password made only of numbers?

Because the calculation considers how many different characters could appear in each position. A 12-digit password has only about 40 bits (below the limit of the "weak" range), while 12 characters mixing all four groups exceed 75. Increasing the length or ticking more groups raises the score.

The site rejected the generated password. What should I do?

Some sites block certain symbols or limit the length. Generate another password, untick the symbols if needed or reduce the length. As for the mix of types, it is guaranteed for every group that is ticked.

Can I use the generated password for Wi-Fi, email, banking, anything?

Yes, it is an ordinary string of characters. Just remember to write it down in a safe place, since it is hard to memorize.

🔐 Password Generator