How to use the Strong Password Generator
- Set the length with the slider.
- Choose character sets.
- Click Generate or Passphrase, then copy.
About this tool
Most account takeovers start with reused or guessable passwords. The fix is simple: a unique, random password for every account, kept in a password manager. This generator uses crypto.getRandomValues — a cryptographically secure source — and guarantees at least one character from every set you select.
How strong is strong enough?
Strength is measured in bits of entropy: length × log₂(pool size). A 20-character password from all four sets has about 130 bits — far beyond any brute-force attack. For things you must type or remember, a passphrase of five random words is easier on humans and still strong.
| Entropy | Verdict |
|---|---|
| < 50 bits | Weak — crackable offline |
| 50–80 | Good for most accounts |
| 80+ | Excellent |
Read our password security guide for the full picture.
Frequently asked questions
Are generated passwords saved?
No. They exist only in this page until you close it.
Why exclude look-alike characters?
Removing I, l, 1, O and 0 helps when a password must be read aloud or typed from paper.
Passphrase or password?
Random passwords for a password manager; passphrases for your master password and device logins.