How do I generate a strong password?

Use the generator above: set a length of at least 16 characters and enable uppercase letters, lowercase letters, numbers, and symbols. Click Generate. The password is created using the Web Crypto API's cryptographically secure random number generator — it never leaves your browser. For maximum security, use a different randomly generated password for every account.

What makes a password secure?

A secure password is long (16+ characters), random (not based on words, names, or dates), and unique (never reused across sites). Length is the most important factor: a 16-character random password takes orders of magnitude longer to crack than a 10-character one, even with the same character set. Avoid passwords based on dictionary words, even with number/symbol substitutions.

How long should my password be?

Security guidelines recommend a minimum of 12 characters for most accounts and 16+ characters for high-value accounts (banking, email, password manager). With modern GPUs, a random 8-character password (all character types) can be cracked in hours; a 12-character password takes years; a 16-character password is practically uncrackable with current technology.

Is it safe to use an online password generator?

This generator runs entirely in your browser using the Web Crypto API. No data is sent to any server — the password is generated locally and never transmitted over the network. You can verify this by disconnecting from the internet and still generating passwords successfully. That said, always check whether the site you're using runs locally or sends requests to a server.

What is the difference between a passphrase and a password?

A passphrase is a sequence of random words (e.g. 'staple-horse-battery-correct') rather than a mix of random characters. Passphrases are easier to remember while still being highly secure due to their length. A random 4-word passphrase has roughly the same entropy as a random 10-character password with all character types. Both are strong — choose based on whether you need to type it from memory.

How do I remember complex passwords?

You shouldn't try to remember individual random passwords — use a password manager (Bitwarden, 1Password, KeePass) that stores them encrypted and fills them in automatically. You only need to remember one strong master password. This lets you use a unique, maximally random password for every site without the cognitive burden of memorising dozens of them.

Utilities

Password Generator

Generate strong random passwords locally. Nothing leaves your browser.

StrengthVery Strong

103 bits of entropy

Options

Length16

Uppercase (A–Z)Lowercase (a–z)Numbers (0–9)Symbols (!@#…)

Frequently Asked Questions

Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes in your browser.

→

UUID Generator

Generate v4 (random) or v7 (timestamp) UUIDs in bulk.

→

Base64 Encode / Decode

Encode text to Base64 or decode Base64 to text with full UTF-8 support.

→