Password Generator: Strong, Random, Private

How to use the Password Generator

1. Set the Length with the slider — 16 by default, and longer is the single biggest strength upgrade there is.
2. Tick the character sets the site allows: uppercase, lowercase, digits and symbols all start on.
3. Tick Exclude look-alikes only for passwords you will read aloud or type by hand.
4. Set How many if you need a batch, then click Generate and read the strength note under the result.
5. Copy the password straight into your password manager — until you do, it exists only on your screen.

About this tool

A good password is a random password — humans are pattern machines, and attackers know every pattern we use: names, dates, keyboard walks, the digit and symbol tacked on the end. This generator builds passwords character by character from your browser’s built-in random source, guarantees that each character family you enable actually appears, and tells you the honest entropy of the result. Entropy is the honest measure — the combinations an attacker would have to try, expressed in bits. It grows with length and with pool size: every extra character multiplies the combinations by the size of the pool it is drawn from. The labels translate the number into English — under 50 bits is Weak, under 70 is Fair, under 100 is Strong, and 100 or more is Excellent. The defaults, 16 characters across all four sets, come out at about 102 bits. Choose the sets for the site you face. Some forms forbid symbols; the look-alike option exists for passwords you must read aloud or type from paper — it removes 0, O, 1, l and I from the pool, and the strength estimate honestly drops a little to match. Untick everything and the generator falls back to lowercase letters rather than producing nothing. And when several logins need rotating at once, generate a batch of up to twenty in one click. Because generation runs entirely on your device, a password made here has effectively never existed on the internet. Generate one, put it straight into your password manager, and use a different one for every account — uniqueness across accounts protects you more than any single password’s cleverness. Need an identifier rather than a secret? The uuid generator makes unique IDs for code and databases, and the random number generator draws numbers in any range you set. For the official word on what makes a password strong — length first, and a different one for every account — see the US standards body NIST's SP 800-63B password guidelines.

Worked example

Here is one batch of one, generated with the default settings — your result will be entirely different, which is the point: Settings

Length 16 · How many 1 · Uppercase, lowercase, digits and symbols all on · Look-alikes allowed

You get (one possible result)

#mn7_px-<#n70FW_

The note under this password read “Strength: Excellent · about 102 bits of entropy per password. Generated locally — never transmitted.” All four sets are visible in the result — capitals, lowercase, digits and symbols — shuffled into position rather than laid out in a pattern. Generate again and a completely different password appears.

Features

• Four character sets, each guaranteed to appear at least once in every password.
• An honest entropy estimate with a plain-English strength label on every result.
• Lengths from 6 to 64 characters, and batches of up to 20 passwords at once.
• A look-alike exclusion (0, O, 1, l, I) for passwords that must be read or typed by hand.
• Strength that responds honestly: exclude characters and the estimate drops to match the smaller pool.
• Private by design: passwords are generated on your device — never transmitted, logged or stored.