Password Generator

Strong, random passwords built on your device with the browser's cryptographic random source. Nothing is sent anywhere and nothing is stored.

Your password

—

Entropy: —
Time to crack: —
Length: —

a-z A-Z 0-9 !@#

Options

Length

Include lower case a-z Include upper case A-Z Include numbers 0-9 Include symbols !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~ Exclude look-alike characters iIl1L| o0O `'-_":;., Exclude brackets <>()[]{} No repeated characters

Excluding characters makes a password easier to read out or retype, but slightly weaker — the pool it is drawn from is smaller.

How to read this

Entropy

How much randomness the password carries, in bits. Each extra bit doubles the work an attacker has to do. Above 60 bits is strong for everyday accounts; above 80 for anything valuable.

Time to crack

An estimate from zxcvbn — it looks for dictionary words, names, keyboard runs and common substitutions, so a "clever" password can score badly. Length beats cleverness.

Look-alike characters

Capital I, lower-case l and the digit 1 are hard to tell apart in many fonts. Excluding them stops a colleague locking themselves out after retyping the password.

Privacy

Generated in your browser and never sent anywhere. Nothing is stored — reload the page and it is gone.