How to use the password generator
- Choose the length. Longer is stronger; 16 or more is a good habit for important accounts.
- Choose the characters. Some sites don't allow symbols; untick them if a site refuses your password.
- Press "Copy" next to the one you like and paste it into the site, ideally straight into a password manager.
How the passwords are made
Each character is picked by your browser's secure random number generator (crypto.getRandomValues), the same kind used for encryption, not the predictable kind used for games. Every allowed character is equally likely. We make sure each type you ticked appears at least once, then shuffle the order.
The strength figure counts how many passwords like this one are possible, written as "bits": every extra bit doubles the number of guesses an attacker would need to try them all.
Worked example
Frequently asked questions
Do you see or keep my passwords?
No. They're made inside your browser and never sent anywhere or saved. Once you leave the page they're gone, so copy the one you want first.
How do I remember strong passwords?
You don't need to. A password manager (many browsers and phones have one built in) can save a different strong password for every site. Then you only need to remember one strong password for the manager itself, and you can turn on two-step sign-in where sites offer it.
Why leave out look-alike characters?
Letters like I and l and the number 1 look the same in many fonts. If you'll ever need to read or type the password by hand, leaving them out avoids mistakes. It makes the password slightly weaker, so add a character or two.
Is the strength figure a guarantee?
No. It measures how many random passwords like yours are possible, which is the right measure for a random password. It can't protect a password that's reused, shared or stolen by a fake website, so use a different one for every site.