inetutils
🔑

Password generator

Generate a strong, random password instantly. Nothing is sent to any server.

Password strengthWeak
Length16
864

What makes a password strong?

A strong password is long (at least 12–16 characters), random, and uses a mix of character types. Length matters most — every extra character multiplies the number of combinations an attacker must try. A 16-character random password is trillions of times harder to crack than an 8-character one.

This generator uses your browser's built-in crypto.getRandomValues() API — a cryptographically secure source of randomness. Nothing is sent to any server; the password is generated entirely on your device.

Password managers like Bitwarden, 1Password, and Dashlane can generate and store strong unique passwords for every site, so you only need to remember one master password. Using a password manager is one of the highest-impact security improvements most people can make — reusing passwords across sites is how most accounts get compromised after a data breach.

Frequently Asked Questions

How long should a password be?

Security experts generally recommend a minimum of 12 characters, with 16 or more being ideal for sensitive accounts like email, banking, and cloud storage. Some sites impose a maximum length — if so, use the longest they allow. For most purposes, a 20-character random password provides security well beyond what any foreseeable brute-force attack could overcome.

Should I use special characters?

Yes, if the service allows them. Special characters (!, @, #, $ etc.) increase the pool of possible characters for each position in the password, making brute-force attacks harder. However, not all services accept all special characters — if a generated password is rejected, try generating a new one or disable symbols.

Is it safe to use a password generator on a website?

This generator is completely client-side — it never sends any data to a server. You can verify this by disconnecting from the internet and trying it; it will still work. The generated passwords exist only in your browser and are never logged or transmitted anywhere.

What's the difference between a password and a passphrase?

A passphrase is a sequence of random words (e.g. "purple-kettle-marathon-sock") rather than random characters. Passphrases can be equally or more secure than character-based passwords while being easier to remember and type. For passwords you need to memorise, a passphrase is often preferable; for passwords stored in a password manager, random characters are fine.