Password Generator

1. Choose Password · random characters or Passphrase · random words.
2. For a password, set the length from 1 to 128 characters (20 by default) and choose the character types. Turn on Exclude similar-looking characters if the password will be read or typed by hand.
3. For a passphrase, choose 3 to 12 words (6 by default) and a separator of up to 8 characters, such as a dash or a space.
4. Press Generate password or Generate passphrase, copy the result and save it in your password manager. Changing any option clears the previous result.

Every character and word is chosen with crypto.getRandomValues, the browser's cryptographically secure random source, using rejection sampling so that no character is more likely than another. Math.random() is never used.

When several character types are selected, the password contains at least one character of each. Instead of forcing those characters into fixed positions, the generator draws complete passwords and discards any that miss a type, which keeps every valid password equally likely.

Random characters pack the most strength into the fewest characters, which suits password managers and sites with length limits. The symbols are !@#$%^&*()-_=+[]{};:,.?/~, and excluding similar-looking characters removes I, l, 1, O, 0 and o.

A passphrase is easier to remember and type, for example for a computer login or the master password of a password manager. Words come from the EFF Long Wordlist of 7,776 words, so each word adds about 12.9 bits of entropy and the default six words give about 77 bits. Words are chosen independently, so a word can repeat.

Passwords are generated on your device and kept only in this page's memory; the tool never uploads or saves them. Copying puts the password on your clipboard, and Clear result clears this page, not your clipboard.

Like the rest of the site, this page uses Google Analytics and Yandex Metrica, including Metrica session replay. Tool events report only that the tool was opened or used.

The tool area is marked so that Metrica masks what you type and the results in its session recordings.