Free tool
Password Generator
Generated locally with your browser's secure random generator. Nothing is sent or stored.
What this checks
- Generates random passwords using your browser's cryptographic random number generator (crypto.getRandomValues).
- Lets you choose the length, 20 characters by default, and which character sets to include: lowercase, uppercase, numbers and symbols.
- Leaves out characters that are easy to confuse, such as 0 and O or 1 and l.
- Offers a passphrase mode that joins capitalised words from a built in list with hyphens and adds a number. Nothing is sent to a server.
Why it matters
People pick passwords that feel random but follow patterns attackers know well: names, years, keyboard runs. A generator removes human bias. For shared accounts in a small office, such as the website admin, the router or the accounting system, a generated password stored in a password manager is far harder to guess than one somebody made up.
How to read the result
- Random character mode gives the most strength per character. A 20 character password using all four sets is very strong for any account.
- The passphrase list is short, so each word adds roughly five bits of strength. Passphrases here are easier to type, but for an important account use random mode or a longer passphrase.
- Turning off character sets reduces strength, so make the password longer to compensate if a system rejects symbols.
- Every click of regenerate produces a new password; nothing is saved, so copy it into your password manager straight away.
How to fix what it finds
- Save each generated password in a password manager as soon as you create it.
- Use a separate generated password for every account, including shared office accounts.
- Change default passwords on routers, printers, CCTV systems and new software to generated ones on day one.
- Pair strong passwords with two-factor authentication on email and admin logins.
Want it fixed for you, or tested properly? See what a test would cost or book a free 30 minute call.
Questions people ask
Are online password generators safe?
One that generates in your browser with a cryptographic random source, like this one, never sends the password anywhere. Avoid generators that produce passwords on a server you cannot inspect.
Is a passphrase better than a password?
A passphrase built from enough random words from a large word list is strong and easy to remember. This tool's built in list is small, so add more words, or use random mode, for accounts that matter most.
How do I remember a random password?
You should not need to. Store it in a password manager and remember only one strong master passphrase for the manager itself.
Related free tools
- Password Strength CheckerSee how strong a password is and how long it would take to crack, checked privately in your browser.
- Password Breach CheckerSee if a password has appeared in a known data breach. Checked privately and never leaves your browser.
- Security Check-UpEight questions across four areas: get a scorecard and your top fixes, each linked to the right next step. No email needed.