Are the passwords safe? Are they logged anywhere?

Passwords are generated on your device with the Web Crypto API (crypto.getRandomValues). They never travel over the network and this site has no code that records them. They disappear when you close the page, so save them in a password manager right away.

How long should a password be?

For ordinary accounts, at least 12 characters mixing uppercase, lowercase, numbers and symbols (about 70+ bits of entropy). For important accounts such as email, banking or a password manager master password, use 16 or more. The strength meter shows entropy in real time.

What does "entropy" mean?

Entropy in bits measures how many possible combinations a password has: length × log2(character set size). Each extra bit doubles the effort of a brute-force attack. Roughly, under 40 bits is weak, 64+ is strong and 96+ is very strong.

When should I exclude ambiguous characters?

When a password will be handwritten, read aloud or printed, O and 0 or I, l and 1 are easy to confuse. Ticking the option removes them. If the password only lives in a password manager you do not need it.

Will every selected character type actually appear?

Yes. The generator picks at least one character from each selected class (custom characters included), fills the rest at random and then shuffles, so you never get an all-letter password when numbers were requested.

What if a site only allows certain symbols, or forbids some characters?

Type the allowed symbols into "Custom characters" and untick "Symbols" to use only those. Type forbidden characters into "Custom exclusions" and they will never appear in the password.

Are my settings saved?

Yes. Length, character types, custom characters and exclusions, and the count are stored in this browser's local storage and reused the next time you open the page; "Reset to defaults" clears them. The generated passwords themselves are never stored.

Do I need to sign up or pay?

No. The tool is completely free, requires no account and has no usage limits.

🔐

🔐Random Password Generator - Create Strong Secure Passwords Online

Still using birthdays or 123456? This tool creates truly random, hard-to-guess passwords in seconds. Set the length (4 to 64), pick whether to include uppercase, lowercase, numbers and symbols, and tick "Exclude ambiguous characters" to drop look-alikes such as O/0 and I/l/1 when you need to write a password down. Passwords come from the browser's cryptographically secure random generator, are different every time, and never leave your device.

Loading tool...

How to use Password Generator

1Drag the slider to set the length and tick the character types to include (uppercase, lowercase, numbers, symbols)
2Optionally exclude ambiguous characters and choose how many passwords to generate at once
3Click "Copy" next to the one you like, or "Regenerate" for a fresh batch

FAQ

Are the passwords safe? Are they logged anywhere?: Passwords are generated on your device with the Web Crypto API (crypto.getRandomValues). They never travel over the network and this site has no code that records them. They disappear when you close the page, so save them in a password manager right away.
How long should a password be?: For ordinary accounts, at least 12 characters mixing uppercase, lowercase, numbers and symbols (about 70+ bits of entropy). For important accounts such as email, banking or a password manager master password, use 16 or more. The strength meter shows entropy in real time.
What does "entropy" mean?: Entropy in bits measures how many possible combinations a password has: length × log2(character set size). Each extra bit doubles the effort of a brute-force attack. Roughly, under 40 bits is weak, 64+ is strong and 96+ is very strong.
When should I exclude ambiguous characters?: When a password will be handwritten, read aloud or printed, O and 0 or I, l and 1 are easy to confuse. Ticking the option removes them. If the password only lives in a password manager you do not need it.
Will every selected character type actually appear?: Yes. The generator picks at least one character from each selected class (custom characters included), fills the rest at random and then shuffles, so you never get an all-letter password when numbers were requested.
What if a site only allows certain symbols, or forbids some characters?: Type the allowed symbols into "Custom characters" and untick "Symbols" to use only those. Type forbidden characters into "Custom exclusions" and they will never appear in the password.
Are my settings saved?: Yes. Length, character types, custom characters and exclusions, and the count are stored in this browser's local storage and reused the next time you open the page; "Reset to defaults" clears them. The generated passwords themselves are never stored.
Do I need to sign up or pay?: No. The tool is completely free, requires no account and has no usage limits.