Password Generator: create secure passwords
Use the free Password Generator to create secure, random passwords of 8 to 64 characters. Choose the length and character types; the password is generated instantly in your browser and is never stored or transmitted. Strength is shown as entropy—for example, about 127 bits for 20 characters using all character types.
Built by Rugile Rutkauskaite
Strong passwords are just the start. Host on a VPS with your own firewall.
Password
—
Generated entirely in your browser (Web Crypto API)—your password is never sent to a server, stored, or logged.
Excludes easily confused characters such as 0/O or 1/l/I from the password.
Why this tool
Generate random passwords online: secure and free
What makes this password generator secure and practical.
Cryptographically secure
Each character comes from the Web Crypto API (crypto.getRandomValues()) rather than Math.random() and is selected without bias using rejection sampling.
Custom length
8 to 64 characters using the slider or −/+, default 20 characters.
Custom character set
Toggle uppercase letters, lowercase letters, numbers, and special characters individually. Each selected character type appears at least once.
Avoid ambiguous characters
Optionally excludes the easily confused characters 0, O, 1, l, and I.
Nothing is sent
Generated entirely in your browser—no transmission, storage, or logging.
Live password strength indicator
Weak, Medium, or Strong plus entropy in bits, updated instantly as you change settings.
How it works
How the Password Generator Works
Get your random, secure password in four steps.
Step 1
Set length
Set the password length between 8 and 64 characters using the slider or the − and + buttons. The default is 20 characters.
Step 2
Choose character types
Choose uppercase letters, lowercase letters, numbers, and special characters. If you need to type the password manually, enable “Avoid ambiguous characters.”
Step 3
Check strength
The password is regenerated instantly whenever you change a setting. Check the strength indicator (Weak, Medium, or Strong with a bit value), and use the refresh icon to get a new password with the same settings.
Step 4
Copy password
Click “Copy password” and paste the password into your account or password manager.
Length guide
How long should a secure password be?
These values come from the same calculation as the generator's strength indicator: length × log2 of the character pool size. A password is rated “Weak” below 45 bits, “Medium” from 45 bits, and “Strong” from 75 bits.
| Length | All four character types | Without special characters |
|---|---|---|
| 8 characters | ~51 bits of entropy · Medium | ~48 bits of entropy · Medium |
| 12 characters | ~76 bits of entropy · Strong | ~71 bits of entropy · Medium |
| 16 characters | ~101 bits of entropy · Strong | ~95 bits of entropy · Strong |
| 20 characters | ~127 bits of entropy · Strong | ~119 bits of entropy · Strong |
| 32 characters | ~203 bits of entropy · Strong | ~191 bits of entropy · Strong |
If a form doesn't accept special characters, uncheck that option and increase the length instead. We deliberately don't show a ready-made example password: a published password is no longer secret. Set your desired length above and generate your own.
Explore more
Related tools for passwords and developers
Bcrypt Generator & Checker
Generate and verify Bcrypt hashes—entirely in your browser, with an adjustable cost factor.
Built by Rugile Rutkauskaite
Hash Generator (MD5, SHA-1, SHA-256, SHA-512)
NewGenerate MD5, SHA-1, SHA-256, and SHA-512 hashes from text or files and compare checksums. Runs entirely in your browser.
Built by Luca Stanek
UUID Generator
Generate version 1, 4, 5, and 7 UUIDs individually or in bulk, with customizable formatting, entirely in your browser.
Built by Jakub Martyniak
JWT Debugger
Decode, edit, and re-sign JSON Web Tokens, including signature verification for HS256/HS384/HS512 and RS/PS/ES verification with a public key, entirely in your browser.
Built by Jakub Martyniak
Password Checker (Password Strength Checker)
Password Checker: Check your password's strength, cracking time, and pattern warnings. Runs entirely in your browser; nothing is transmitted.
Built by Luca Stanek
FAQ
Password Generator FAQ
Quick answers about length, strength, character types, and privacy.
Yes. The Password Generator runs directly on this page in your browser, with no account, sign-up, or installation. You can generate as many passwords as you need.
Set the length between 8 and 64 characters above and choose the character types. The generator creates a new password as soon as you change a setting. Use the refresh icon to generate another with the same settings. Select “Copy password” to copy it to your clipboard.
The generator supports 8 to 64 characters and starts at 20. We recommend at least 16 characters, or 20 or more for email, password managers, and server access. With all four character types, 8 characters provide about 51 bits, 12 about 76 bits, 16 about 101 bits, and 20 about 127 bits.
No. Your password is generated entirely in your browser using the cryptographically secure Web Crypto API (crypto.getRandomValues()) instead of Math.random(). There are no server requests, storage, or logging. If you close the tab without copying the password, it's gone.
Strength is entropy in bits: length × log2 of the character pool selected in your settings. Below 45 bits, the tool shows “Weak”; from 45 bits, “Medium”; and from 75 bits, “Strong”. At 20 characters with all four character types, that's about 127 bits.
Uppercase A–Z, lowercase a–z, digits 0–9, and special characters !@#$%^&*()-_=+[]{}? can each be toggled separately. At least one character comes from each selected type; the rest come from the combined pool, then all characters are shuffled. If a form doesn't accept special characters, uncheck them and increase the length.
This option excludes 0, O, 1, l, and I from all character sets because they are easy to confuse in many fonts. This helps when you need to type a password manually, such as a Wi-Fi password on a router. The smaller character pool slightly reduces entropy.
Yes. If a service is hacked, attackers automatically try the same credentials on other services (credential stuffing). Store your random passwords in a password manager instead of memorizing them. This generator doesn't create memorable passphrases from words; it creates passwords from individual characters.
Any more questions?
Contact SupportLooking for a secure server for your projects?
A ZAP-Hosting VPS gives you your own SSH access, firewall, and full root access.
No setup. No risk. Online in seconds.
Looking for more tools? View all developer tools
