Password Generator — Free Online Tool
Weak passwords are the #1 way accounts get hacked. Generate a strong, truly random password with your choice of length and character sets — created locally, never transmitted.
What is the Password Generator?
A strong password has two properties: length and unpredictability. Each extra character multiplies the guesses an attacker needs — a 16-character password from a 90-character set has about 105 bits of entropy, meaning even billions of guesses per second wouldn't crack it in your lifetime. Reuse, by contrast, is what actually gets people hacked: one breached site hands attackers the key to everything else.
This generator uses your browser's cryptographically secure random source (not Math.random), guarantees at least one character from each set you enable, and never sends anything over the network. Pair generated passwords with a password manager and turn on two-factor authentication wherever it's offered.
How to use this calculator
- Choose the length (16+ recommended).
- Toggle character sets: uppercase, lowercase, digits, symbols.
- Optionally exclude ambiguous characters (like 0/O, 1/l).
- Click Generate, then Copy to use it.
Formula
Frequently asked questions
How long should my password be?
16+ characters for important accounts. Longer is always better; length beats complexity.
Is it safe to generate passwords in a browser?
Yes here — generation uses crypto.getRandomValues and everything stays on your device. Nothing is uploaded or logged.
Should I use symbols?
They help, but length matters more. A 20-character lowercase-only password beats an 8-character complex one.
What are ambiguous characters?
Lookalikes like 0/O and 1/l/I that cause typos. Excluding them is handy for passwords you must read or type.