New accounts
Make a different password for every site, and keep them in a password manager.
Generate strong passwords, free and private
Choose a length and the kinds of characters, and get a random password with a strength score. It is made on your device and never stored or sent.
Random characters from 6 to 128 long, word passphrases or PINs. You can make up to 100 at a time.
Features
What you get
- Secure random source
- Random characters and word choices come from your browser's cryptographic random generator, not from a predictable one.
- You choose the recipe
- Length from 6 to 128, upper case, lower case, numbers and the exact symbols you allow, at least one of each kind, a starting letter, no repeats, and characters to never use.
- Passphrases and PINs
- Words from the EFF long list of 7,776 words, with your choice of separator, capitals and digits, or a PIN of 4 to 20 digits.
- Honest strength
- The bits come from how the password was made, not from a guess at what it looks like. Two crack-time estimates show the assumptions they use.
- Check your own
- A tab judges a password you type: common passwords, keyboard patterns, runs, repeats and years are found and explained. It stays in the page.
- Not stored or sent
- Passwords are made on your device and are not sent to a server. Only your settings are remembered on the device, never a password.
How it works
Make a password in four steps
Choose the type
Random characters, or words for a passphrase.
Set the length
Longer is stronger. 16 or more is a good start.
Generate
A new password appears. Change any setting and it updates.
Copy it
Copy it straight into your password manager.
Uses
When you need one
Wi-Fi and devices
Make a long key for a router or a shared account.
Setting up teams
Generate a batch of one-time passwords in one go.
Checking an old one
Type a password into the checker to see how strong it is.
How long should a password be?
| Length (all character types) | Roughly |
|---|---|
| 8 characters | Weak against modern cracking. Avoid. |
| 12 characters | Reasonable for low-risk accounts. |
| 16 to 20 characters | A strong choice for most accounts. |
| 30 or more | For master passwords and encryption keys. |
To keep your files private as well, see the EXIF data stripper.
Frequently Asked Questions (FAQ)
Random-character passwords use your browser's cryptographic random generator, and word choices do too. They are made on your device, so they are not sent to us.
It is the number of bits of entropy, a measure of how many guesses would be needed. More bits is stronger. For a password made here it is worked out from the recipe. The crack times assume an attacker who knows the recipe, and use 10 billion guesses a second for a stolen, fast-hashed copy and 100 a second for a login that limits tries.
A password made of random words, such as Battery-Horse-Staple. It is easier to remember. The words come from the EFF long list of 7,776, so five words is about 65 bits and six about 78.
Yes, on the Check a password tab. It looks for common passwords, keyboard patterns, runs like 1234, repeats and years, and explains what it found. It is an estimate, and nothing you type leaves the page.
Yes, when the work stays on your device, as it does here. Nothing is sent to a server, but save the password somewhere safe straight away.
Yes, from 1 to 100 at a time. Copy one, make one again, copy them all, or download a text file.
No. They are gone when you close the page unless you save them. The "keep" list holds a few in this tab only, and empties when the tab closes. Only your settings are remembered, on your device.