Password Generator
Generates random passwords or memorable passphrases using your browser’s cryptographic random generator. Choose the length and character types, copy, done – the passwords never leave your device.
Source: W3C Web Cryptography API – Crypto.getRandomValues(). Updated: .
How it is calculated
A good password is above all random and long. This generator uses your browser’s Web Crypto function crypto.getRandomValues() – the same cryptographically secure randomness used for encryption. Each character is drawn without modulo bias (rejection sampling).
How to generate a strong password
- Choose the type: random password (characters) or passphrase (words).
- Set the length or number of words and tick the character types – uppercase, lowercase, digits, special characters.
- Copy the password. The entropy in bits shows how much randomness it contains.
Example: 16 characters using all four character types give about 104 bits of entropy. The same length with lowercase letters only reaches 16 × log₂(26) ≈ 75 bits – every extra character type and every extra character raises the value.
At least one character of each type – without bias
Many generators place one fixed character per selected type and then shuffle the result. That favors small groups such as digits. Here, a candidate is instead drawn completely at random and rejected whenever a selected character type is missing. That way every valid password is exactly equally likely.
Entropy: how much randomness is in it?
Entropy in bits is the base-2 logarithm of the number of possible outcomes. Example: 16 characters out of 90 possible characters (A–Z, a–z, 0–9, 28 special characters) give 16 × log₂(90) ≈ 103.9 bits; the rule “at least one of each selected type” rules out some combinations and costs about 0.26 bits – calculated exactly with inclusion-exclusion, so the figure shown is ≈ 103.6 bits. Every extra bit doubles the effort needed to try every possibility.
Passphrase: memorable yet strong
A passphrase consists of randomly chosen words, for example ladder-tobacco-moon-tile-rudder-basket. With 7,776 words, each word contributes log₂(7,776) ≈ 12.9 bits, so six words give ≈ 77.5 bits. The German Federal Office for Information Security (BSI) explicitly names 5–6 random words as a good method. The word list used here is the EFF Large Wordlist (CC BY). Important: only randomly chosen words are secure – a phrase you make up yourself is far easier to guess.
Recommendations
- BSI (German Federal Office for Information Security): 8–12 characters with four character types, or 20–25 characters with two character types; Wi-Fi keys at least 20 characters.
- NIST SP 800-63B: at least 15 characters if the password protects the account on its own; at least 8 characters only when combined with a second factor.
- Use a separate password for every account – a password manager makes this easiest.
Related tools: test an existing password with the password strength checker, create random IDs with the UUID generator, make checksums with the hash generator, or draw any random number with the random number generator.
Frequently asked questions
Are the generated passwords stored anywhere?
No. They are created only in your browser, never sent, never stored, and never written to the address bar. Reload the page and they are gone.
How long should a password be?
For a random password, 16 characters using all character types (≈ 104 bits) is plenty. NIST requires at least 15 characters if no second factor is used. For passphrases, the BSI recommends 5–6 random words.
What does “bits” mean for entropy?
The number of bits tells you how many equally likely possibilities there are: 2 to the power of the bit count. 80 bits are about 1.2 septillion possibilities – at ten billion attempts per second, trying them all would take millions of years.
Why skip look-alike characters?
I, l, 1 and |, O, 0 and o are hard to tell apart in many fonts. Leaving them out makes a password easier to type correctly. This lowers the entropy slightly – the display accounts for that.
Is a passphrase as secure as a random password?
Yes, if the words are truly chosen at random: six words from 7,776 (≈ 77.5 bits) correspond to about 12 random characters from A–Z, a–z and 0–9 (≈ 71.5 bits). With seven words (≈ 90.5 bits) you are clearly above that.
Is a 12-character password strong enough?
A random 12-character password using all four character types has about 78 bits of entropy, which is strong for most accounts. NIST asks for at least 15 characters when the password is the only factor, so 16 is a safe default.
How do I create a strong password I can remember?
Choose “Passphrase (words)”: several random words with a separator are easier to remember than a string of symbols and still strong. Five or six random words are a good target.
How can I check if my password is strong?
Enter it in the password strength checker – it estimates the strength locally in your browser. A random 16-character password from this generator is already very strong.
Sources and legal basis
- W3C Web Cryptography API – Crypto.getRandomValues()
- EFF – Deep Dive: EFF’s New Wordlists for Random Passphrases (EFF Large Wordlist, CC BY)
- EFF – Copyright (CC BY 4.0)
- BSI – Creating secure passwords
- NIST SP 800-63B: NIST SP 800-63B-4 – Digital Identity Guidelines: Authentication (3.1.1 Passwords)
As of: · Editorial policy
Related tools
- Password Strength CheckerHow secure is my password? Check strength, entropy in bits, and how long it would take to crack — locally in your browser, never sent or stored.
- Token Counter for AI PromptsHow many tokens is my prompt? Token counter for ChatGPT, Claude & Gemini: estimated range by language, plus characters and words — locally, no upload.
- Word Counter and Character CounterCharacter counter: characters with and without spaces, words, sentences, reading and speaking time, top words – live, with limits for X, Instagram and SMS.
- Random number generatorRandom number generator: pick numbers between any two values, 1–100 or up to 1,000 at once, no repeats if you like. Powerball and EuroMillions presets.
- Text to Speech: read text aloudText to speech online: paste text or load a file, pick a voice, speed and pitch, follow along word by word and skip by sentence. Free, no sign-up needed.
- Username generatorCreate usernames: cool, funny or cute handles like “NightWolf42”, with your preferred length, underscore or dot and optional number. Up to 40 ideas, free.
- Alphabetize ListAlphabetize a list online: sort lines A–Z or Z–A, by length or number, remove duplicates and blank lines. Accents sorted correctly; runs in your browser.
- Handwriting and name tracing worksheet generatorMake free tracing worksheets: letters, words or names in print or cursive on handwriting lines (1 in, 5/8 in, 1/2 in). Printable PDF for preschool to grade 3.
- Reading Time CalculatorReading time calculator: paste a text and see at once how long it takes to read and to read aloud – with word count, page count and an adjustable reading speed.