How to use
- Choose the length — 16 or more is recommended.
- Choose which kinds of characters to include.
- Click Copy, and paste the password into the website.
- Click "Generate new" for a different password.
How it works
Each character is picked with crypto.getRandomValues, the same secure random source browsers use for encryption, without any bias. Strength is measured in bits of entropy: length × log₂(number of possible characters).
Tips and common uses
Length beats complexity
A longer password is much harder to guess than a short one with many symbols. Use 16 characters or more for important accounts such as email and banking.
One password per site
If a site is hacked and you reused its password elsewhere, attackers will try it on your other accounts. Make a new password for each site and store them in a password manager.
When symbols are not accepted
Some sites reject certain characters. Untick symbols, and make up the strength by raising the length. Tick "Avoid look-alike characters" if you will type the password by hand from a screen or paper.
Frequently asked questions
How long should my password be?
At least 12 characters, and 16 or more for important accounts like email and banking.
Is it safe to generate passwords online?
Here, yes: the password is created inside your browser and is never sent to any server or saved.
How do I remember strong passwords?
Use a password manager, such as the one built into Chrome, Safari or Android, instead of reusing one password everywhere.