Strong password and passphrase generator
Create a random password or a passphrase of simple words. Everything happens in your browser with crypto.getRandomValues, so the password never leaves your device.
Pick at least one character set.
How to use it
- Pick Random password for accounts saved in a password manager, or Passphrase for passwords you have to type, like a laptop login.
- Use at least 16 characters, or 7 words for a passphrase. The entropy line shows how strong the result is.
- Press Copy, and store it in your password manager straight away.
Even better than a strong password
Turn on multi-factor authentication for every account that supports it, and use passkeys where you can. A strong password stops guessing; MFA and passkeys also stop phishing and reused-password attacks.
Related guides
Questions people ask
Is it safe to generate a password on a website?
This generator runs entirely in your browser with the Web Crypto API (crypto.getRandomValues). The password is never sent to a server, logged or stored. You can even load the page and then go offline before generating.
How long should a password be?
At least 14 to 16 random characters for accounts you care about. Length matters more than symbols: a 20-character password from letters and numbers is far stronger than an 8-character one with symbols.
Are passphrases secure?
Yes, when the words are chosen randomly. Five random words from this list of about 250 give roughly 40 bits plus the number; use 7 or more words for important accounts, or a random password stored in a password manager.
What does entropy mean?
Entropy in bits measures how many guesses an attacker needs: each extra bit doubles the work. Around 75 bits is strong for online accounts; 100 bits and more is very strong.