Password generator

How does the generator work?

It picks each character with your browser’s cryptographic random number generator, makes sure every kind of character you ticked appears at least once, then shuffles the result.

The strength line shows the randomness in bits: the length times log2 of how many characters it picks from. Each extra bit doubles the number of guesses an attacker needs. A 20 character password from all four kinds of characters has about 128 bits.

How do I read the result?

• Strong: 80 bits or more.
• Fair: 60 to 79 bits. Make it longer or tick more kinds of characters.
• Weak: under 60 bits.

Press Copy to put the password on your clipboard, then save it in your password manager.

Questions and answers

Is it safe to make a password on a website?

Only when the page makes it in your browser and sends nothing. This one does. Open your browser’s network panel, press the button, and you will see no request.

How long should a password be?

Longer is stronger. If a password manager fills it in for you, 20 characters or more costs you nothing.

Why leave out look-alike characters?

0 and O, or 1, l and I, are easy to mix up when you type a password from paper or read it out. Leaving them out costs a little randomness, so add a character or two.

Do you store the passwords?

No. The password exists only on this page until you close or reload it.

More free tools

• SSL checker

  See who issued a site's certificate, when it expires, the names it covers and whether browsers trust it.

• DNS checker

  Ask Cloudflare, Google and Quad9 for a record at the same time and see whether they agree.

• WHOIS lookup

  Find a domain's registrar, creation and expiry dates, status and name servers. Works for .pk domains too.

• IP lookup

  See your own IP address, or find which network and country an IP address belongs to.

• Website up or down checker

  Load a page once and see the status code, how long it took, the time to first byte and every redirect.