Skip to content
Allin

Password generator

Generate a strong, random password — free and secure.

This free password generator creates strong, random passwords from a cryptographic random source. Choose the length and character types, and get a password that's hard to guess and hard to crack.

How to use it

  1. Choose the password length (16 or more is recommended).
  2. Toggle uppercase, numbers and symbols to include.
  3. Copy the password and store it in a password manager.

Frequently asked questions

What makes a password strong?

Length and randomness. Aim for at least 16 characters mixing uppercase, lowercase, numbers and symbols, with no dictionary words or personal info.

How long should my password be?

At least 12–16 characters for everyday accounts, and 20+ for sensitive ones. Longer passwords are exponentially harder to crack.

How do I remember strong passwords?

Don't — use a password manager to store a unique password per site. You only need to remember one strong master password.

What does Password generator do?

Generate a strong, random password — free and secure.

When would I actually use this?

Creating a credential you will not have to remember, judging whether one you already use is strong enough, and generating a passphrase for something a manager cannot hold.

What is the most common mistake?

Chasing complexity rules instead of length. Four random words beat a short string of symbols by a wide margin in entropy, and the substitutions people make to satisfy a rule are the first thing an attacker tries.

What else is filed next to it?

Django Secret Key Generator, WordPress Secret Key Generator and WPA Key Generator share its section. They are not variants of it — being filed together is not the same as being alike — but that is where to look if this turned out not to be the tool you wanted.

Where do the figures come from?

Entropy is computed from the alphabet and the length rather than estimated from appearance, and generation uses the browser's cryptographic source. Nothing you generate or paste is transmitted or stored.

Further reading

All guides
How-toHow to Create a Strong PasswordLength beats complexity. Here's why a four-word passphrase is strong, why you should never reuse a password, and how a manager makes it effortless.GuideGenerating an Application Secret Key CorrectlyHow to tell a sound secret-key generator from an unsound one, using this one as a worked example: which random source it calls, how to compute the entropy yourself, and what actually breaks the day you rotate the key.GuideWhat a Password Manager Cannot MeasureEntropy prices one attack: offline guessing against a stolen hash. Above roughly 90 bits the number stops deciding anything — and the meter on this site under-reported a random 20-character password in 300 draws out of 300.GuideEncrypt a File, Then Send the Key Down a Different RoadThe encryption is the easy half. Here is exactly what the browser tool does to your file — cipher, key derivation, salt, nonce — and why an encrypted attachment with the passphrase in the same thread protects nothing at all.ExplainerPassword Entropy: What a Strength Meter Cannot KnowEntropy measures the process that produced a password, not the characters in it. H = L x log2(R) is only true when every character was chosen at random — which is exactly why a meter scoring a human-invented password on its character classes is measuring the wrong thing.ExplainerWhat Is a QR Code?A QR code is a 2D barcode a camera reads to open a link or text. Here's what it is, why it holds so much, its anatomy, and a safety note on scanning.