Password generator
Strong, random passwords created with your browser's cryptographic generator. Nothing is sent anywhere, nothing is saved.
Updated October 31, 2026
●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●●
Checked on your device with zxcvbn (dictionary words, patterns, dates), loaded only when you type here. Nothing is sent.
How it works
- Set the length and the character types you need.
- Copy a password with one click, or regenerate for a new set.
- The strength estimate shows how long an attacker would need to crack it.
Password, passphrase or PIN
Three types cover most needs. A random password of 4 to 128 characters (16 by default) with uppercase, lowercase, digits and symbols is for accounts you keep in a password manager. A passphrase of 3 to 12 words (5 by default), joined by a dash, a space, a dot or nothing, is for the ones you have to type or remember: a laptop login, a Wi-Fi network, the master password of the manager itself. A PIN of digits only is for phones, cards and door codes.
You can generate up to 20 at once, copy one or all of them, or download the set as a text file. Previous sets stay on the page until you leave it, so a password you copied a minute ago and lost in the paste is still there to copy again.
Fitting a site's password rules
Some sites reject certain symbols, cap the length or demand at least one digit. Exclude characters removes up to 32 characters from the alphabet, Min. digits and Min. symbols force a minimum of each, and Avoid look-alikes drops 0, O, l, 1 and I so a password read from paper or a screen is typed right the first time. Easy to say keeps only letters and digits for passwords you may have to read out loud.
What this page does not do
It is not a password manager: nothing is saved, synced or shown again after you leave, so copy the password into your manager or the sign-up form straight away. The random values come from your browser's own cryptographic generator, created on your device, and no request carries them anywhere. Tick Clear the clipboard after 30 s if you copy passwords on a shared computer.
Why people use it
Free, no account
Every tool is free, with no sign-up, no e-mail address and no limit on how often you use it.
Your files stay on your device
The browser opens the file and processes it in memory, on your device. Nothing is uploaded, so nothing can be kept, leaked or looked at.
No watermark
The result is yours as it is: no watermark, no branding, no trial version.
Any device
A phone, a tablet or a computer with a current browser is enough: no app to install, no software to update.
Works offline after the first visit
The browser keeps the pages and their engines, so a tool you have opened once keeps working without a connection.
Open-source engines
The code that does the work is open-source software, named on the Licences page, running as WebAssembly in your browser.
Why it is private
Everything you type or drop here is handled by your browser, on your device. Nothing is uploaded. To verify, open your browser's developer tools, go to the Network tab, and use the tool: you will see no request carrying your data.
While a file is being processed, the counter under the result shows the page's network traffic: 0 requests and 0 B for your data.
How to check it yourself, step by step
What you can check yourself
Open your browser's developer tools on the Network tab before you drop a file: while the tool works you will see no request carrying your data, and the counter under every result shows the page's own measurement.
The site sets no cookies, so there is no cookie banner. Anonymous usage counts and error reports without file names are the only things that leave the page, as the privacy policy describes.
Every change goes through thousands of automated tests in three browser engines, including a guard that fails a test if a single byte of a file leaves the page.
Frequently asked questions
- How random are these passwords?
- They come from the Web Crypto API (crypto.getRandomValues), the same generator browsers use for encryption, with uniform sampling so no character is favoured.
- Are the passwords stored or sent anywhere?
- No. They exist only on your screen until you leave the page.
- How long should a password be?
- 16 characters with all character types gives about 100 bits of entropy, far beyond what can be brute-forced. Use a password manager so you never have to remember it.
- What does the strength score mean?
- For generated passwords it comes from the entropy of the alphabet and length, with the time to crack at 10 000 guesses per second offline. For a password you type into "Check your own password", zxcvbn looks for dictionary words, patterns and repeats; it is loaded only then.
- What is a passphrase?
- Several random words from the EFF long list (7 776 words, about 13 bits each): five words give around 65 bits and are far easier to type and remember than 12 random characters. A separator, capitals and a digit are optional.
- Can I generate several passwords at once?
- Yes, up to 20 per set. Copy them one by one, copy all, or download a .txt file; the set is made again with every click on Generate new.
- Can I leave out characters a site does not accept?
- Yes. Type them in Exclude characters (up to 32) and they are never used. If every character is excluded the tool says so and generates nothing.
- Is the password cleared from the clipboard?
- Only if you tick Clear the clipboard after 30 s. Browsers cannot clear it while the page is in the background, so the tool tells you when that happened and offers Clear now.
- Does it work offline and on a phone?
- Yes. Once the page has loaded, no connection is needed to generate passwords, and on a phone the Large text button makes a password easy to read while you type it elsewhere.
- Is it safe to type my real password into the checker?
- The check runs on your device with zxcvbn, loaded only when you start typing, and nothing is sent. Still, treat it as an estimate: a password that was ever leaked is weak whatever the score says.
Install it as an app
Chrome, Edge and Android browsers offer to install this site from the address bar or the menu; on iPhone use Share, then Add to Home Screen. It opens like an app, keeps working offline and still processes everything on your device.