Password Generator

About

Make a strong random password, a memorable passphrase or a PIN. Passwords are built with your browser's cryptographically secure random number generator, shown with a strength estimate in bits of entropy. The password itself is never stored or sent anywhere; only your settings (length, character sets, and so on) are remembered in this browser, so the tool opens the way you left it.

How long should a password be?

For a random password, 16 characters or more is plenty for most accounts. The default of 20 is about 128 bits of entropy. The strength readout shows the number for whatever you pick.

What is a memorable password?

Several random words from the EFF large wordlist (7,776 words), for example five words at about 65 bits. Easier to type and remember than random characters, and still strong.

Is it safe to generate a password on a website?

This one runs entirely in your browser using crypto.getRandomValues, and the password itself is never transmitted or stored. Save what you generate in a password manager.

What is a good PIN length?

Longer is better, but a six-digit PIN is only about 20 bits, so PINs suit places that limit attempts, like a phone lock or bank card.

What does No look-alikes do?

It removes characters that are easy to confuse when reading or typing: I, l, 1, O, 0 and o.

What gets remembered between visits?

Only the settings: password type, length, which character sets are on, and similar. The password itself is generated fresh every time and never saved. Use Clear saved to forget the settings and go back to the defaults.

What happens to a copied password?

It clears from your clipboard automatically 30 seconds after you copy it, unless you've copied something else in the meantime (in which case nothing is touched, so a later copy is never clobbered).