Humans are terrible at randomness. Given a choice, we pick our pet's name plus the year we were born, and every breach database knows it.
Updated August 15, 2026, after a fresh review, with updated visuals and links.
The generator below uses your browser's cryptographic random source to build genuinely unpredictable passwords. Nothing you generate ever leaves this page.
What makes a password actually strong
Length beats complexity: a 16-character password of mixed letters outmuscles an 8-character one full of symbols, because every extra character multiplies the guess count by ~60 or more.
True randomness beats clever patterns: substitutions like P@ssw0rd were cracked so long ago that rulebooks laugh at them. Random strings have no pattern to exploit.
One password per account, always: a password manager remembers the 16-character monsters this tool creates, so uniqueness costs you nothing.
Worth remembering
- The 'avoid look-alikes' option removes l, 1, I, O and 0: handy for passwords you must read aloud or transcribe by hand.
- For accounts you type often on TV remotes or consoles, 12 to 14 characters without symbols balances strength and typing pain.
Frequently asked
Is an online password generator safe?
This one generates everything locally in your browser tab (you can even disconnect the internet and it still works). The rule for any generator: it must not send your password anywhere, and must use a cryptographic random source instead of basic Math.random, which this one does.
How long should my passwords be?
16 characters or more for anything important. With a password manager doing the remembering, there is no reason to go shorter.
