Password Generator
Generate random passwords or memorable passphrases
Password Options
Advanced Options
Password Security Tips
- • Use at least 12-16 characters, or 6+ words for a passphrase
- • Check the crack-time estimate, not just the character count
- • Never reuse passwords across different accounts
- • Use a password manager to store your passwords securely
- • Enable two-factor authentication (2FA) whenever possible
- • Change passwords regularly, especially for sensitive accounts
How to Use
- 1Choose Random Password mode or Passphrase mode
- 2Random: select length and character types. Passphrase: select word count and separator
- 3Optionally exclude similar/ambiguous characters, or add a number to a passphrase
- 4Click Generate to create your secure password or passphrase
- 5Check the zxcvbn strength score and crack-time estimate below the result
- 6Click the 'Copy' button to copy it to your clipboard
- 7For multiple at once, adjust the count and generate in bulk
Password Security Best Practices
- •Use at least 16 characters, or a 6+ word passphrase, for maximum security
- •A real crack-time estimate matters more than character count alone
- •Never reuse passwords across different accounts
- •Store passwords in a secure password manager
- •Enable two-factor authentication (2FA) wherever available
- •Change passwords immediately if you suspect a breach
- •Avoid using personal information like names or birthdates
- •Don't share passwords via email or unsecured messaging
Explore More Tools
UUID Generator
Generate unique identifiers for databases and applications
Hash Generator
Create MD5, SHA-1, SHA-256 hashes for data verification
Base64 Encoder
Encode and decode text and files to Base64 format
QR Code Generator
Create QR codes for URLs, text, and contact information
Related Tools
Text Diff Tool
Compare two text files and highlight differences
JSON Formatter
Format, validate, and beautify JSON data
URL Encoder
Encode and decode URLs for safe transmission
Prompt Diff
Compare system prompts and agent rules side-by-side
robots.txt Generator
Generate/validate robots.txt with AI bot controls
Token Counter
Exact OpenAI tiktoken plus Claude/Gemini estimates
Frequently Asked Questions
What makes a strong password?
Aim for at least 12 characters with uppercase, lowercase, numbers, and symbols. Skip dictionary words, personal details, and common patterns.
Should I exclude similar characters?
Yes, if you type the password often. Skipping look-alikes (O/0, l/1/I) reduces mistakes. Keeping them adds a bit more entropy.
How long should my password be?
Use at least 16 characters for most accounts, and 20 or more for high-value ones. Longer passwords take much longer to crack.
What is a passphrase, and is it as secure as a random password?
A passphrase strings together several random dictionary words, for example "Correct-Horse-Battery-Staple-42". Each word here comes from the EFF's long wordlist (7,776 words, about 12.9 bits of entropy each), picked with the same cryptographically secure randomness as the character-based generator. Six words give roughly 77 bits of entropy, comparable to a 12-character fully random password, but far easier to type and remember. Longer isn't automatically better here: the entropy comes from the number of words, not the character count.
How is password strength calculated?
This tool scores every password or passphrase with zxcvbn, the open-source estimator Dropbox built. It models dictionary words, keyboard patterns (like "qwerty" or "1qaz2wsx"), common substitutions ("p4ssw0rd"), and repeated or sequential characters, beyond a simple character-variety count. It also estimates offline crack time, which catches passwords that look strong but are not.
Are generated passwords safe to use?
Yes. Passwords and passphrases use the Web Crypto API's secure random generator in your browser, not Math.random(). Nothing is sent to a server.
How should I store my passwords?
Store them in a password manager such as Bitwarden, 1Password, or LastPass. Do not keep passwords in plain text files or sticky notes. Turn on two-factor authentication where you can.