Free password generator: create strong random passwords or memorable EFF passphrases. Adjust length and characters, see live strength and crack time.
Entropy
103 bits
Time to crack
Effectively uncrackable
You might also find these calculators useful
Analyze password security and crack time
Calculate password strength using information entropy
Estimate how long it takes to crack your password
Generate UUIDs (v1/v4/v7), ULID & NanoID in bulk — or decode one.
Create a strong, unique password or a memorable passphrase in one click. This generator runs entirely in your browser using a cryptographically secure random source, so nothing is ever stored, logged, or sent to a server. Switch between random characters and EFF Diceware passphrases, fine-tune the length and character set, and watch the live strength, entropy, and crack-time estimate update as you go.
A password's strength comes from how unpredictable it is, measured as entropy in bits. Two things drive it: how long the password is, and how large the pool of possible characters (or words) is. Length matters far more than old-fashioned complexity rules — a long random string or a multi-word passphrase beats a short password sprinkled with symbols. The formula below gives the entropy of a random password of length L drawn from a pool of R characters.
Password entropy
Create a unique, strong password for every signup so one breach cannot unlock the rest.
Generate a long, look-alike-free key that is easy to read aloud and type on a TV or console.
Make a quick random numeric PIN for devices, lockers, or door codes.
Use a memorable passphrase you can actually recall as your password-manager master key.
Bulk-generate credentials for test users, seeds, or service accounts and export them to CSV.
Replace old, reused, or breached passwords with fresh high-entropy ones in seconds.
Every character is drawn from your browser's CSPRNG (crypto.getRandomValues) with rejection sampling to remove bias — never the predictable Math.random().
Switch between random-character passwords and EFF Diceware passphrases that are easy to remember and type, yet very hard to crack.
See exactly how strong each result is — entropy in bits, a strength rating, and the estimated time to crack it in an offline attack.
Generation runs entirely in your browser. We never see, store, or transmit the passwords you create — close the tab and they are gone.
Generate up to 50 at once and export them as a CSV file — handy for seeding test accounts or rotating service credentials.
Aligned with NIST SP 800-63B: favor length over forced symbol rules, and replace reused or breached passwords with fresh high-entropy ones.
Aim for at least 12 to 16 characters for everyday accounts. NIST SP 800-63B requires 15 or more for single-factor logins and recommends allowing up to 64. Length matters far more than special-character rules — a longer password is exponentially harder to crack.
Yes, when the generator uses a cryptographically secure random source and runs on your device. This tool uses your browser's built-in CSPRNG and never sends, stores, or logs anything — the passwords exist only on your screen.
A passphrase is several random words strung together, such as correct-horse-battery-staple. With the EFF Diceware list each word adds about 12.9 bits of entropy, so a six-word passphrase (around 77 bits) is both very strong and far easier to remember than a random string.
By entropy, in bits. For random passwords, entropy = length × log₂(pool size); for passphrases it is words × log₂(7,776). More bits mean exponentially more guesses are needed. Under about 28 bits is very weak, 60+ is strong, and 128+ is effectively uncrackable.
They enlarge the character pool and add entropy, so include them when a site allows. But a long passphrase can be just as strong without symbols — modern guidance favors length over forced complexity rules.
No. All generation happens locally in your browser with JavaScript. Nothing is transmitted to a server, saved, or shared. Close the tab and the passwords are gone for good.
Up to 50 in a single batch. You can copy them all with one click or download the list as a CSV file — useful for developers and IT admins.
Use a reputable password manager rather than reusing passwords or writing them down. A manager lets you keep a unique, strong password for every account while you remember only one master passphrase.