How to use the Password Generator
- Choose password or passphrase.
- Set the length and character types.
- Check the strength estimate.
- Copy a password and store it in a password manager.
Example
| Input | 16 characters, all types |
|---|---|
| Result | e.g. q7#Vt9!mZ2@xLp4K (≈ 105 bits — very strong) |
Passwords or passphrases
Use the Type buttons to switch between the two. A password is a random string of characters, which is best when a password manager will remember it for you. A passphrase is a few random words joined together, which is easier to type and remember, so it is good for the one master password you must keep in your head.
Password settings
- Length from 4 to 128 characters. The default is 16, and longer is stronger.
- Character types: capital letters, lowercase letters, digits and symbols. When length allows, the password includes at least one character from each type you select.
- Exclude look-alikes: leaves out characters that are easy to confuse, such as O and 0 or I, l and 1. This is on by default and helps if you ever have to type a password by hand.
- How many: generate from 1 to 50 at a time.
Passphrase settings
- Number of words, from 3 to 12 (the default is 5).
- A separator: hyphen, space, dot, underscore or nothing.
- Capitalize the words, and optionally add a number to one of the words.
Understanding the strength meter
Under the results you see a label and an estimate in bits of entropy. The label reads Weak below 40 bits, Fair below 60, Strong below 80 and Very strong above that. Each extra bit doubles the number of guesses an attacker needs, so adding length helps more than adding exotic symbols.
Staying safe
- Use a different password for every account, and keep them in a reputable password manager.
- Turn on two-factor authentication wherever it is offered.
- Never reuse a password or share it over email or chat.
- Passwords here are created in your browser with your device’s secure random number generator and are never sent to a server. Even so, copy them straight into your password manager and do not leave them in open tabs.
Frequently asked questions
Is it safe to generate passwords here?
Yes. Passwords are created on your device using the browser’s secure random number generator (crypto.getRandomValues). They are never transmitted or stored.
How long should a password be?
Use at least 14–16 random characters for important accounts, or a passphrase of 5 or more random words. Use a different password for every site.
What is a passphrase?
A passphrase is several random words joined together, like “marble-orbit-tulip-swift-cocoa”. It is easier to remember and still very hard to guess.
How long should my password be?
For important accounts, use at least 16 random characters or a passphrase of 5 or more words. Official guidance such as NIST’s focuses on length and on checking passwords against known breaches rather than forcing odd symbols.
Is a passphrase as strong as a password?
A random passphrase of 5 or more words can be very strong, and it is much easier to type. The strength meter shows the estimate for the settings you choose.