Password Generator
Create a random password of 8–64 characters from upper, lower, digits and symbols, with an entropy estimate in bits.
How to use
- Set the length with the slider (8–64 characters, 16 by default).
- Choose the character types. Upper, lower and digits are on by default; turn symbols on yourself. There is also an option to skip look-alikes such as 0 O 1 l I.
- A new password appears whenever you change a setting; Regenerate makes another with the same settings. The entropy in bits and a Weak, Fair or Strong grade are shown with it.
- Use Copy to put it on the clipboard. Share with settings makes a link that carries only the length and character types, not the password.
FAQ
How long should a password be?
Length matters most. NIST SP 800-63B-4 (2025) requires at least 15 characters when a password is the only factor, so the default of 16 or more is a good choice. If a site caps the length, use as long a password as it allows.
How is strength graded?
By entropy in bits: under 50 is weak, under 80 is fair and 80 or more is strong. Sixteen characters from upper case, lower case and digits is about 95 bits (strong); twelve is about 71 bits (fair). The bit count is an estimate, length × log2 of the character count.
Does it include every character type I tick?
Yes. It places at least one character from each ticked type, fills the rest at random and then shuffles the order. That makes it easy to satisfy sign-up rules such as requiring a digit and a symbol.
How is the randomness produced?
Each character is drawn with the browser's cryptographic random function, crypto.getRandomValues, and the draw is unbiased so no character is favoured.
Which symbols are used?
The 28 symbols !@#$%^&*()-_=+[]{};:,.<>?/~` when symbols are on. Quotes (' "), backslash (\), the pipe (|) and spaces are left out because they often cause trouble in input fields.
What does skip look-alikes do?
It drops characters that are easy to confuse, such as 0/O and 1/l/I. It helps when a password must be copied by hand or read aloud.
How do I remember it?
If you must memorise a password, leave symbols out and make it longer; otherwise store it in a password manager. Do not reuse one password across sites. Passphrases and PINs are not supported.
Are my settings remembered?
The length and character types are stored in this browser and come back next time. Reopening or refreshing the page generates a new password, so copy the one you want to use right away.