Password Generator
Generate multiple strong passwords with strength scoring and custom rules.
How to use Password Generator
Frequently Asked Questions
How long should my password be?
Security experts recommend at least 16 characters for important accounts such as email, banking, and cloud storage. Every additional character exponentially increases the total number of possible combinations — a 16-character password using all four character types has more than 10²⁹ possible values, making brute-force attacks computationally infeasible even with modern hardware.
Are generated passwords stored anywhere?
No. Passwords are generated client-side using your browser's built-in Web Crypto API (crypto.getRandomValues), which is the same cryptographic standard used by browsers for TLS. Passwords are displayed on screen only — they are never transmitted to any server, never logged anywhere, and never stored in local storage or cookies. Close the tab and they are gone permanently.
What does excluding ambiguous characters do?
Excluding ambiguous characters removes character pairs that look similar in many fonts and at small sizes: 0 (zero) and O (capital O), 1 (one) and l (lowercase L), and I (capital I) and l (lowercase L). This prevents transcription errors when you need to type a password manually on another device. It has no negative impact on password security — the remaining character set is still very large.
Is it safe to use an online password generator?
Yes, provided the generator runs entirely in your browser — which this one does. Because no network request is made when generating passwords, there is no server that could intercept or log the output. Be cautious of generators that require an account, collect your email, or make any server requests when you click Generate.
What makes a password strong?
A strong password has four properties: sufficient length (16 or more characters), character variety (uppercase, lowercase, numbers, and symbols), true randomness (no dictionary words, names, dates, or predictable patterns), and uniqueness (never reused across different accounts or services). The strength meter on this tool evaluates all four criteria and gives you an instant rating.