Free tool

Password Generator

Strong random passwords, generated in your browser. Cryptographically random, fully configurable, and generated entirely on your device.

Generating…
Excellent~129 bits of entropy

Time to crack at 1010 guesses/sec: longer than the age of the universe

20
864

Every enabled character set is guaranteed to appear at least once. At least one set must stay on.

Entropy beats complexity rules

What makes a password strong isn't how weird it looks — it's how many equally likely possibilities an attacker has to try. That quantity is measured in bits of entropy: each extra bit doubles the search space. A password picked by a true random source from a large pool has high entropy by construction. “P@ssw0rd!” satisfies every classic complexity rule yet sits near the top of every cracking dictionary, because humans following rules produce predictable patterns. This generator uses your browser's crypto.getRandomValues — a cryptographically secure random source — with rejection sampling, so every character is chosen with exactly equal probability.

Why length beats symbols

Adding symbols to a password grows the character pool from 62 to roughly 90 — worth about half a bit per character. Adding characters multiplies the whole search space: going from 12 to 20 random characters adds around 47 bits, doubling the attacker's work 47 times over. If a site forces a trade-off, always take the longer password. The strength meter above does this math live: drag the length slider and watch the time-to-crack estimate jump from days to centuries to longer than the age of the universe.

When to use a passphrase instead

Random character soup is perfect for anything a password manager fills in for you. But for the handful of secrets you must type from memory — your manager's master password, your computer login, disk encryption — a passphrase of randomly chosen words is far easier to remember and type at the same strength. “Falcon-Granite-Sunset-Kettle-42” is dramatically stronger than a short scrambled string, and you'll still know it next month. The strength comes from the words being chosen at random from the list, never from being meaningful to you — a quote or song lyric is just another dictionary entry.

Frequently asked questions

Is it safe to generate a password on a website?

Here, yes. Passwords are generated entirely in your browser with crypto.getRandomValues, the same cryptographically secure random source password managers use. Nothing you generate is ever sent over the network, logged, or stored — you can disconnect from the internet after the page loads and the tool keeps working.

Should I reuse a really strong password across sites?

No — strength doesn't protect against reuse. When any one site is breached and its password database leaks, attackers immediately try those credentials everywhere else (“credential stuffing”). A unique random password per site means one breach stays one breach. Use a password manager so uniqueness costs you nothing.

Password or passphrase — which should I pick?

Use random-character passwords for everything stored in a password manager, and word-based passphrases for the few secrets you type by hand from memory. At equal entropy they're equally strong — the difference is purely that words are easier for humans to remember and type, while character strings are denser per keystroke.

Do you store or see anything I generate?

No. Generation happens on your device and the result never leaves it. There are no accounts, no analytics on the generated values, and nothing is written to any server. Once you navigate away, the password exists only where you pasted it.

Part of the Hextrot studio

Ready for the full version?

If you're generating proper random passwords, you clearly care about doing things properly. SnippetVault gives your code snippets and configs the same treatment — organized and searchable — and FormForge collects form submissions without you wiring up a backend.

This tool is free forever. So is the account.

One free Hextrot account unlocks the free tier of all 30 products in the studio — invoices, link pages, forms, polls, status pages and more.

Create your free account