Password Generator

Generate strong, random passwords in your browser with your choice of length and character types.

  • Reviewed October 2026
  • Formula and worked example below
  • Free, no sign-up, runs in your browser
Enter your numbers to see the result.

How this generator works

Passwords are created entirely in your browser using the cryptographically secure random number generator built into every modern browser. Nothing is sent to our server or stored. Each generator run also guarantees at least one character from every type you selected.

What makes a password strong

Strength is measured in bits of entropy: the number of guesses an attacker would need, expressed as a power of two. It grows with length and the size of the character pool.

Entropy = Length × log2(Pool size)

A 16-character password using about 80 different characters has 16 × log2(80) ≈ 101 bits of entropy. At a trillion guesses per second, brute-forcing it would take far longer than the age of the universe.

As a rule of thumb, 60 bits is reasonable for most online accounts protected by rate limits, and 80 bits or more is recommended for passwords that protect encrypted files or password managers.

Good password habits

  • Never reuse passwords. When one site is breached, attackers try the same email and password everywhere else.
  • Use a password manager to store unique passwords, so you only need to remember one strong master password.
  • Turn on two-factor authentication, ideally with an authenticator app or security key rather than SMS.
  • Length beats complexity. A long passphrase of four or five random words is both strong and memorable.

Frequently asked questions

Is it safe to use an online password generator?

This one generates passwords locally in your browser with crypto.getRandomValues. The password never leaves your device.

How long should my password be?

At least 12 characters for everyday accounts and 16 or more for important ones such as email, banking and your password manager.

Should I change my passwords regularly?

Current NIST guidance says no, unless there is evidence of compromise. Use long, unique passwords and change them if a site reports a breach.

Add this calculator to your website

Free to use on blogs, school sites and company intranets. Copy this code into your page:

Last reviewed Oct 20, 2026. Results are estimates; check important decisions with a qualified professional.