Password to protect
Generate strong, random passwords instantly — customize length and character types.
Runs locally in your browser. Your passwords are never sent to a server.
Character types
Set a length, choose which character types to include, and press "Generate Password" for a fresh, cryptographically random result. Turn on "Exclude similar characters" if you'll be typing the password manually rather than pasting it, and set a quantity above 1 to generate a whole batch at once.
A long password made only of lowercase letters can still be harder to guess than a short one stuffed with symbols — length increases the search space exponentially, while adding a character type only multiplies it by a fixed factor. Security guidance has shifted accordingly: current recommendations from NIST and most security professionals favor length (12\u201316+ characters) over forcing artificial complexity. This tool defaults to 16 characters with all types enabled for a strong, well-rounded result, but feel free to push the length higher for anything especially sensitive.
Rather than picking every character from one combined pool \u2014 which could, by pure chance, occasionally skip a type entirely \u2014 this generator guarantees at least one character from each type you've enabled, then fills the rest randomly and shuffles the whole result. That avoids the frustrating case of generating a password that then fails a website's "must contain a symbol" rule.
Passkeys are a newer, passwordless way to sign in, built on cryptographic keys tied to your device and unlocked with your fingerprint, face, or PIN \u2014 not something you type or copy, and not something any web tool can generate for you as text. Until a given site or app supports passkey login, a strong, unique password is still the right tool for the job, which is exactly what this generator produces.
Every character is chosen using your browser's cryptographically secure random number generator, the same class of randomness used for cryptographic keys, not a basic pseudo-random function.
No. A passkey is a cryptographic credential tied to your device and biometrics through the WebAuthn standard — it isn't a string of characters you can generate, copy, or type. This tool generates strong text passwords, which remain the right choice for any site or service that doesn't yet support passkey login.
The generator guarantees at least one character from each type you've enabled, then fills the rest randomly and shuffles the result. This avoids the rare but real annoyance of a purely random draw happening to skip a required character type — which then fails many sites' password rules.
It removes characters that are easy to confuse when read or typed — like l, I, 1, O, and 0 — which is useful if you'll be reading the password aloud or typing it manually rather than pasting it.
No. Every password is generated entirely in your browser and is never transmitted to a server or stored anywhere outside your own device.