🔓 Lloyds bank just exposed 447,936 customers' data — including NI numbers and account details. If you're reusing passwords across sites, one breach can compromise everything. Generate a unique password for every account below. Full story →
Password Generator
Generate strong, secure random passwords and passphrases. Powered by cryptographic randomness — nothing leaves your browser.
Click Generate to create a password
— 0 bits of entropy
or press Space
Generate Multiple
Create several passwords at once with the same settings.
Frequently Asked Questions
How does this password generator work?
This generator uses your browser's crypto.getRandomValues() API to produce cryptographically secure random passwords. Every character is selected with true randomness — the same source used by professional password managers and encryption software. No passwords are ever sent to a server; everything runs locally in your browser.
What makes a password "strong"?
Password strength depends primarily on entropy — the number of possible combinations an attacker would need to try. A strong password has at least 60 bits of entropy. This means using a mix of uppercase letters, lowercase letters, numbers, and symbols, with a length of at least 12 characters. Our strength meter calculates entropy in real time so you can see exactly how secure your password is.
What is a passphrase and why use one?
A passphrase is a password made of random words separated by dashes (e.g., "correct-horse-battery-staple"). Passphrases are easier to remember than random character strings while still being very secure. A 4-word passphrase has roughly 51 bits of entropy, while a 6-word passphrase exceeds 77 bits — strong enough for most purposes.
What does "exclude ambiguous characters" mean?
Ambiguous characters are ones that look similar in many fonts: 0 (zero) and O (letter O), 1 (one) and l (lowercase L) and I (uppercase i). Excluding them makes passwords easier to read and type manually, which is useful when you need to enter a password on a different device.
How long should my password be?
We recommend at least 16 characters for important accounts. For maximum security, use 20+ characters. The minimum secure length is 12 characters when using a mix of all character types. Longer passwords are exponentially harder to crack — each additional character multiplies the number of possible combinations.
Is it safe to generate passwords in a browser?
Yes, when using a generator like this one that runs entirely client-side. Your passwords are generated locally using your browser's built-in cryptographic random number generator. Nothing is transmitted over the network, stored on a server, or logged anywhere. You can even use this tool offline.
Can I generate multiple passwords at once?
Yes! Use the "Generate Multiple" section to create up to 10 passwords at once with the same settings. This is handy when you need to set up passwords for multiple accounts or want several options to choose from.