Strong Random Password Generator
Updated · Free · No sign-up · Runs in your browser
Create a strong, random password in one click. Choose the length and which character types to include, and exclude look-alike characters such as 0/O and 1/l/I.
Passwords are created on your device with crypto.getRandomValues and are never stored, logged or sent to a server. Each enabled character type is guaranteed to appear at least once.
Created on your device with crypto.getRandomValues. The password is never stored or sent anywhere.
Password strength by length (letters, numbers and symbols)
*Offline attack at 100 billion guesses per second, random passwords only. Reused or predictable passwords are cracked far faster.
| Length | Entropy | Average time to guess* |
|---|---|---|
| 8 characters | 51.4 bits | 4.1 hours |
| 10 characters | 64.3 bits | 3.6 years |
| 12 characters | 77.1 bits | 25.7 thousand years |
| 14 characters | 90 bits | 196 million years |
| 16 characters | 102.8 bits | longer than the age of the universe |
| 20 characters | 128.5 bits | longer than the age of the universe |
What makes a password strong?
- Length matters most: 16+ random characters is a good default.
- Randomness: generated passwords avoid names, dates and keyboard patterns.
- Uniqueness: use a different password for every account, saved in a password manager.
- Turn on two-factor authentication where available.
Password generator that excludes similar characters
Tick "Exclude look-alike characters" to remove O, 0, o, I, l, 1, |, S, 5, Z, 2, B and 8. Use it when a password must be read aloud or typed from paper.
How the strength estimate works
Entropy = length × log2(number of possible characters). Each extra bit doubles the guesses needed. The estimate assumes the password was generated randomly, as it is here.
Frequently asked questions
Are these passwords safe to use?
Yes. They are generated on your device with a cryptographically secure random generator and never transmitted. Copy the password into your password manager.
How long should my password be?
At least 12 characters, ideally 16 or more. Some sites limit length or symbols — adjust the options to fit.
Do you store or see my password?
No. Nothing is sent to any server or saved. Reloading the page creates a new password.
What does "exclude look-alike characters" do?
It removes characters that are easy to confuse, such as 0 and O or 1, l and I, so the password is easier to read and type.
Why does a site reject my password?
Some sites forbid certain symbols or set a maximum length. Untick Symbols or shorten the length and generate again.
How long would a 16-character password take to crack?
About longer than the age of the universe on average at 100 billion guesses per second, if it is random and not reused.