Generate strong random passwords in one click, with optional length and character types, plus a strength rating and estimated brute-force crack time. Passwords are generated locally and never uploaded.
Your password (click the password to copy)
Generating…
Generating…
Generation options
Tip: the longer the password, the safer it is; symbols may not be accepted by some older systems, so uncheck them if needed.
Strength analysis
AD · LEADERBOARD 728×90 (PLACEHOLDER — REPLACED WHEN ADSENSE GOES LIVE)
FAQ
How long should a password be to stay safe?
With upper case, lower case, digits and symbols, 12+ characters is a reasonable baseline and 16+ is recommended for important accounts. Length matters more than complexity.
Are generated passwords recorded anywhere?
No. Passwords are generated locally in your browser using the built-in cryptographically secure random number generator (crypto.getRandomValues). They never pass through a server and disappear when you refresh the page.
Why exclude look-alike characters?
0 vs O, and 1 vs l vs I are hard to tell apart in handwriting or certain fonts, so copying or typing a password by hand often goes wrong. Excluding them means fewer mistakes.
How is the estimated crack time calculated?
It estimates the keyspace from the entropy "password length × log2(character-set size)", then assumes an attacker trying 100 billion attempts per second (a high-end offline brute-force assumption) and takes the average — the time to try half the keyspace.