Password Generator

This password generator creates random passwords and multi-word passphrases in your browser, drawing every character or word from crypto.getRandomValues(), a cryptographically secure random source.

Random password options

• Length from 8 to 128 characters.
• Any mix of uppercase, lowercase, numbers and the symbols !@#$%^&*()_+-=[]{}|;:,.<>?.
• No Ambiguous removes look-alike characters: 0, 1, i, l, o, I, L and O.
• An exclude field that drops any characters you type, useful when a site rejects certain symbols.

Passphrases and the bits estimate

Passphrase mode joins 3 to 8 words from a built-in list of 102 words, with seven separator choices (including a space) and optional capitalization.

The bits figure is an estimate: the password length multiplied by log2 of the character pool its character types imply. For passphrases it overstates strength, because an attacker who knows the word list guesses whole words. Each word from a 102-word list adds about 6.7 bits, so four words give roughly 27 bits. Use more words, or Random mode, for anything important.

Best practices

• Use a different password for every account and keep them in a password manager.
• Turn on multi-factor authentication wherever it is offered.
• The Share button puts the password into the link itself, so don't use it for real credentials.
• Recent Passwords is held only in page memory and is cleared when you reload.