Secure Password Generator
Generate strong, cryptographically random passwords or memorable word-based passphrases.
Generated locally in your browser. Nothing is sent to a server or stored.
- Free — no signup, no account, no watermark
- Runs entirely in your browser — nothing is uploaded to a server
- Works on mobile, tablet and desktop
- Instant — results appear as soon as you enter your input
Why this is private
- Generated locally in your browser. Nothing is sent to a server or stored.
- Open your browser's DevTools → Network tab while using this tool — you won't see a request carrying your input, because it never leaves your device.
- Nothing you enter is uploaded to a server or shared with us — the processing happens entirely on your device.
Overview
Generates strong, unpredictable passwords or passphrases using the browser's Web Crypto API — not Math.random(). Random-characters mode gives full control over length (4–128), which character types to include, whether every selected type is guaranteed to appear, and any characters to exclude. Passphrase mode picks random words from EFF's public 7,776-word Diceware list — memorable, and genuinely strong at a reasonable word count. Character selection and word picks both use rejection sampling to avoid modulo bias. Nothing is uploaded, logged or stored.
How to use it
- 1Choose "Random characters" or "Passphrase (words)" mode.
- 2Random characters: pick a preset, or set the length and toggle uppercase, lowercase, numbers and symbols.
- 3Passphrase: set the number of words, separator, capitalization and whether to append a digit.
- 4A result is generated as you change settings — hit Generate for a fresh one.
- 5Copy it, or switch on "Generate multiple" to make a batch and download them as a .txt.
Tips
- Length matters most for character passwords: a 16-character random password from a full set is far stronger than a short one with substitutions like 'P@ssw0rd'.
- For passphrases, word count matters the same way: each extra word adds roughly 12.9 bits of entropy — 5 words is a strong default, 6+ for high-value accounts.
- Use a unique password per site and keep them in a password manager rather than memorising variations.
- Turn on "exclude ambiguous" when a character password will be read aloud or typed from a screen.
Frequently asked questions
What people use it for
Create a unique password for a new accountGenerate one, paste it into your password manager, and never reuse a password across sites.
Get something you can actually memorise or type by handPassphrase mode gives a word-based result that's easier to read off a screen or say aloud than a random character string, at comparable strength.
Meet a site's specific rulesToggle character types and length to satisfy a site that demands — or forbids — certain characters.
Generate long machine secretsSet 32–64+ characters for database credentials or API keys you won't type by hand.
Make a batch for a teamSwitch on multiple generation, produce 10–50 at once, and download them as a text file.
Related tools
All security toolsPassword Strength CheckerCheck a password's strength and estimated crack time.Hash GeneratorGenerate MD5, SHA-1, SHA-256 and SHA-512 hashes, in hex or Base64, with a compare mode.HMAC GeneratorGenerate an HMAC signature for a message with a secret key.UUID GeneratorGenerate random UUID v4 or time-ordered UUID v7 identifiers in bulk.
Ready to use Secure Password Generator?
Secure Password Generator