Skip to content
Free, no sign-up, in your browser

Password Generator: create secure passwords

Use the free Password Generator to create secure, random passwords of 8 to 64 characters. Choose the length and character types; the password is generated instantly in your browser and is never stored or transmitted. Strength is shown as entropy—for example, about 127 bits for 20 characters using all character types.

Built by Rugile Rutkauskaite

Strong passwords are just the start. Host on a VPS with your own firewall.

Password

—

Password strength:Strong~127 bits of entropy

Generated entirely in your browser (Web Crypto API)—your password is never sent to a server, stored, or logged.

20

Excludes easily confused characters such as 0/O or 1/l/I from the password.

Why this tool

Generate random passwords online: secure and free

What makes this password generator secure and practical.

Cryptographically secure

Each character comes from the Web Crypto API (crypto.getRandomValues()) rather than Math.random() and is selected without bias using rejection sampling.

Custom length

8 to 64 characters using the slider or −/+, default 20 characters.

Custom character set

Toggle uppercase letters, lowercase letters, numbers, and special characters individually. Each selected character type appears at least once.

Avoid ambiguous characters

Optionally excludes the easily confused characters 0, O, 1, l, and I.

Nothing is sent

Generated entirely in your browser—no transmission, storage, or logging.

Live password strength indicator

Weak, Medium, or Strong plus entropy in bits, updated instantly as you change settings.

How it works

How the Password Generator Works

Get your random, secure password in four steps.

Step 1

Set length

Set the password length between 8 and 64 characters using the slider or the − and + buttons. The default is 20 characters.

Step 2

Choose character types

Choose uppercase letters, lowercase letters, numbers, and special characters. If you need to type the password manually, enable “Avoid ambiguous characters.”

Step 3

Check strength

The password is regenerated instantly whenever you change a setting. Check the strength indicator (Weak, Medium, or Strong with a bit value), and use the refresh icon to get a new password with the same settings.

Step 4

Copy password

Click “Copy password” and paste the password into your account or password manager.

Length guide

How long should a secure password be?

These values come from the same calculation as the generator's strength indicator: length × log2 of the character pool size. A password is rated “Weak” below 45 bits, “Medium” from 45 bits, and “Strong” from 75 bits.

Random password entropy by length and character type
LengthAll four character typesWithout special characters
8 characters~51 bits of entropy · Medium~48 bits of entropy · Medium
12 characters~76 bits of entropy · Strong~71 bits of entropy · Medium
16 characters~101 bits of entropy · Strong~95 bits of entropy · Strong
20 characters~127 bits of entropy · Strong~119 bits of entropy · Strong
32 characters~203 bits of entropy · Strong~191 bits of entropy · Strong

If a form doesn't accept special characters, uncheck that option and increase the length instead. We deliberately don't show a ready-made example password: a published password is no longer secret. Set your desired length above and generate your own.

Explore more

Related tools for passwords and developers

FAQ

Password Generator FAQ

Quick answers about length, strength, character types, and privacy.

Yes. The Password Generator runs directly on this page in your browser, with no account, sign-up, or installation. You can generate as many passwords as you need.

Set the length between 8 and 64 characters above and choose the character types. The generator creates a new password as soon as you change a setting. Use the refresh icon to generate another with the same settings. Select “Copy password” to copy it to your clipboard.

The generator supports 8 to 64 characters and starts at 20. We recommend at least 16 characters, or 20 or more for email, password managers, and server access. With all four character types, 8 characters provide about 51 bits, 12 about 76 bits, 16 about 101 bits, and 20 about 127 bits.

No. Your password is generated entirely in your browser using the cryptographically secure Web Crypto API (crypto.getRandomValues()) instead of Math.random(). There are no server requests, storage, or logging. If you close the tab without copying the password, it's gone.

Strength is entropy in bits: length × log2 of the character pool selected in your settings. Below 45 bits, the tool shows “Weak”; from 45 bits, “Medium”; and from 75 bits, “Strong”. At 20 characters with all four character types, that's about 127 bits.

Uppercase A–Z, lowercase a–z, digits 0–9, and special characters !@#$%^&*()-_=+[]{}? can each be toggled separately. At least one character comes from each selected type; the rest come from the combined pool, then all characters are shuffled. If a form doesn't accept special characters, uncheck them and increase the length.

This option excludes 0, O, 1, l, and I from all character sets because they are easy to confuse in many fonts. This helps when you need to type a password manually, such as a Wi-Fi password on a router. The smaller character pool slightly reduces entropy.

Yes. If a service is hacked, attackers automatically try the same credentials on other services (credential stuffing). Store your random passwords in a password manager instead of memorizing them. This generator doesn't create memorable passphrases from words; it creates passwords from individual characters.

Any more questions?

Contact Support
Security goes beyond passwords

Looking for a secure server for your projects?

A ZAP-Hosting VPS gives you your own SSH access, firewall, and full root access.

4.4/5 Trustpilot32,000+ Active serversSince 2010

No setup. No risk. Online in seconds.

Flexible TermCancel anytimeOnline in 60 seconds

Looking for more tools? View all developer tools