Password generator
Create a password that is actually random, or a four-word passphrase you can remember. Generated on your device; nothing is sent or stored.
Generated on your device with the browser's cryptographic random source. Never sent anywhere.
How to use it
Choose random characters or memorable words.
For random, set the length and which character sets to include. Sixteen characters with all four sets is a good default.
Copy it into your password manager. Generate another any time.
Random versus memorable
A 16-character random password is stronger than most people will ever need and belongs in a password manager. A four-word passphrase like 'mango-Rocket-silver-42' is weaker per character but long, easy to type on a phone, and far better than any password a person invents.
What makes a password strong
Length first, then variety. Every extra character multiplies the work for an attacker. Avoid anything based on names, dates, keyboard patterns or dictionary words with a number tacked on. Never reuse a password across sites.
Use a password manager
Bitwarden (free), 1Password or the one built into your browser. Generate a unique password per site and let the manager remember it. Turn on two-factor authentication for email and banking.
Common questions
Are these passwords stored anywhere?
No. They are generated with window.crypto on your device and exist only on screen.
Why are some characters missing?
Ambiguous ones (0/O, 1/l/I) are excluded so the password is readable when typed from paper.
How long should a password be?
At least 12 characters; 16 is comfortable. Longer for anything that guards money or email.
Is a passphrase safe?
Four random words from a list give around 50 bits of entropy, fine for most accounts, especially with two-factor on.
Need the full version?
We build login systems the right way: hashed passwords, rate limits, two-factor. If you run a web app for customers or staff, ask us for a security review.