TodayTools

Password generator

Banking, email and work logins, each with its own password you do not have to invent.

PrivateNo uploadsRuns in your browser

Donate
What to generate

Random letters, numbers and symbols.

Very strong129 bits
Length

How strong is it

Made from
87 characters: 26 A-Z + 26 a-z + 10 0-9 + 25 symbols
Entropy
20 × log2(87) = 129 bits
Average time to guess it, trying half of all possibilities
Online login, 10 tries a secondmore than a trillion years
Stolen bcrypt hashes (cost 10), 10 thousand a secondmore than a trillion years
Stolen MD5 or SHA-1 hashes, 10 billion a secondmore than a trillion years

More (0)

File format
    A father and son at the kitchen table

    For every new account

    Strong passwords, made in a tap.

    Family setup. Dinesh helps his son set up his first account.

    BeforeThe same password everywhere

    With sdevA strong new one for each account

    • Man Smiling

      Grandpa too

      His father gets a strong password as well.

    • Happy Family

      Safe and sound

      The whole family feels safe online.

    How to generate a strong password

    1. Pick a type

      Password for sites and apps, Passphrase for something you have to remember or type, Hex or Base64 for API keys and secrets, UUID for identifiers and PIN for numeric codes. A fresh result appears as soon as you switch.

    2. Adjust the options

      Set the length and character classes, or the word count and separator. The meter shows the strength in bits as you change them. Press New for another result with the same settings.

    3. Copy it

      Click the large result or press Copy. The list below holds more results made with the same settings; add 10 more at a time, up to 100, or Copy all to take the whole list.

    Good to know

    • Every value comes from crypto.getRandomValues, the browser's cryptographic random source, using rejection sampling so no character is more likely than another.
    • A password always includes at least one character from each class you tick, so a result never happens to miss digits or symbols.
    • Skip look-alikes drops 0, O, o, 1, l, I and |, so a password can be read aloud or written down without confusion. It lowers the pool slightly; add a character or two to make up for it.
    • Passphrases draw from a list of 512 words, so each word adds exactly 9 bits. Five words with a number gives about 54 bits; use six or seven for accounts that matter.
    • Hex and Base64 match openssl rand -hex N and openssl rand -base64 N. The equivalent terminal command is shown under the results.
    • Results live only on this page. Reload and they are gone; nothing is saved in your browser or sent anywhere.

    Where people use it

    • New account sign-up

      Make a strong password for your bank, email or a shopping site in one tap.

    • Wi-Fi password

      Make a long password with no look-alike letters, easy to type on a TV or phone.

    • Easy to remember

      A passphrase of random words is strong and easier to remember.

    • Keys for apps

      Make random hex or base64 keys for an app secret, and save them as a .env file.

    • Share Wi-Fi as a QR

      Put the new Wi-Fi password into a QR code so guests can join fast.

      QR code generator with logo

    Why this one

    It makes every kind of secret on one page, from a simple PIN to app keys, and none of them ever leave your device.

    • Made in your browser with a secure random source.
    • Nothing is sent or saved anywhere.
    • Passwords, passphrases, PINs, keys and UUIDs on one page.
    • Works on phones, no sign-up.

    What you can change

    • Length
    • Capitals, small letters, numbers, symbols
    • Skip look-alike letters
    • Number of words in a passphrase
    • Save as text, CSV, JSON or .env

    People find this page by searching

    • password generator
    • strong password generator
    • random password generator
    • passphrase generator
    • secure password generator
    • random pin generator
    • random string generator
    • openssl rand hex online
    • generate secret key
    Cite this tool
    • APA
      sdev.in. (n.d.). Strong password generator [Web tool]. https://www.sdev.in/tools/password-generator
    • MLA
      "Strong password generator." sdev.in, https://www.sdev.in/tools/password-generator.
    • Chicago
      sdev.in. "Strong password generator." https://www.sdev.in/tools/password-generator.
    • BibTeX
      @misc{sdev-password-generator,
  title = {Strong password generator},
  author = {{sdev.in}},
  howpublished = {\url{https://www.sdev.in/tools/password-generator}},
  note = {Web tool}
}

    Questions people ask

    Are the passwords generated on a server?

    No. Everything comes from crypto.getRandomValues in your browser. Nothing is sent, logged or stored.

    What do the bits mean?

    Entropy: how many equally likely outcomes an attacker must try. Every extra bit doubles the work. 80 bits or more is very strong for an offline attack.

    How long should a password be?

    With all four character classes on, 12 characters gives about 77 bits, 16 gives about 103 and the default 20 gives about 129. If a password manager fills it for you, longer costs nothing, so 20 or more is a good habit.

    Password or passphrase?

    A passphrase is easier to remember and type, so use it for the things you enter by hand: a password manager master password, a laptop login or Wi-Fi. Use a random password wherever a manager or a config file stores it for you.

    Is the UUID random enough to use as a key?

    It is a version 4 UUID with 122 random bits from the same cryptographic source, so it is unique for practical purposes. For a secret that must resist guessing, prefer Hex or Base64 with 32 bytes, which gives 256 bits.

    Donate