English
Deutsch Français Español Italiano

Free tools

Strong Password Generator

Strong random passwords, made on your device and never sent anywhere.

Runs locally · nothing is uploaded

Very strong · about 104 bits of entropy

Your passwords appear here…

Features

Made on your device

Passwords come from your browser’s secure random generator and are never sent, stored or logged.

No bias, every kind present

Each character is equally likely to be picked, and every kind you tick appears at least once.

Strength you can read

The entropy in bits shows how hard a password is to guess, from weak to very strong.

How to use

  1. 1 Set the length and how many passwords you need.
  2. 2 Tick the kinds of characters to use, and Avoid look-alikes if the password will be read or typed by hand.
  3. 3 Click Copy and paste the password into your password manager or the sign-up form.

Common use cases

  • Signing up for a new account with a unique password
  • Replacing a password that was reused or leaked
  • Setting a Wi-Fi or router admin password
  • Creating temporary passwords for new team members
  • Making database passwords and secrets for development

About this tool

A strong password is long and random, and different for every account. This generator draws each character uniformly from the kinds you pick, using the same secure random source browsers use for encryption, and makes sure every kind you ticked appears at least once.

Symbols are drawn from !@#$%^&*()-_=+[]{};:,.<>/?~. Quotes, backslashes and spaces are left out because they often break forms and scripts.

This tool is built by ToolClack and, like everything we make, it is local-first: your data stays in your browser.

Frequently asked questions

Are the passwords sent or stored anywhere?

No. They are made in your browser with crypto.getRandomValues after the page has loaded, and they exist only on this page until you copy them. Nothing is sent to a server or saved.

How long should a password be?

For accounts saved in a password manager, 16 characters with all four kinds gives about 100 bits of entropy, far beyond any guessing attack. If a site limits the length or refuses symbols, use the longest length it accepts.

What does the entropy in bits mean?

It measures how many guesses a random password could take: each extra bit doubles them. It is the length times log2 of the number of possible characters. Under 45 bits reads as weak, 60 or more as strong and 80 or more as very strong.

What does Avoid look-alikes leave out?

The characters most often confused when a password is read aloud or copied by hand: 0, O and o, 1, l and I. The pool gets a little smaller, so the entropy shown drops slightly.

Related tools

QR Code Generator

Turn a link, a WiFi network or any text into a QR code, ready to print or share.

Productivity Open tool →

Email Signature Generator

A clean email signature for Gmail and Outlook in a minute.

Productivity Open tool →

Image Converter

Convert images between formats, right in your browser.

Productivity Open tool →

VAT Calculator

Add VAT to a net price or work it out of a gross one, at any rate.

Productivity Open tool →

Our products

These tools are free and always will be. Our full products go further.

View all products