Password Generator
Pick a length, generate a random password or PIN, and check your own password for weak spots.
Tool
This tool generates random passwords from 8 to 64 characters long. You choose which sets to use, namely upper case, lower case, digits and symbols, and you can edit the symbol list. You can also remove look-alike characters such as 0, O, 1 and l. Every set you tick is guaranteed to appear at least once. There is a PIN mode from four to twelve digits and a one-click list of five passwords.
The figure under the password is entropy, given in bits: the length multiplied by the base-2 logarithm of the pool size. The higher it is, the harder the password is to guess. The four verbal levels beside it use fixed thresholds that are explained on the page. We give no time-to-crack estimate, because that depends on the attacker's method and hardware and cannot be stated as a verifiable number.
Randomness comes from the browser's secure random number generator, and the selection is free of bias. Generation and the 'Test your own password' section run entirely in your browser; the password is not sent anywhere and is not stored. The test gives no score. It lists findings such as length, repetition, sequences and common passwords. A password is only as safe as your habits, so use a different one for every account; a password manager makes that easier.
FAQ
Is the password I generate sent or stored anywhere?
No. It is generated in your browser, no network request is made and nothing is saved. The values disappear when you close the page, so copy the one you want into a safe place.
How long should a password be?
Entropy rises with length, so choose a long one where you can. Check the maximum length and the character rules of the account as well; some sites reject symbols, in which case you can switch that set off.
Is it safe to type my own password here?
What you type is assessed only on this page, in your browser. It is not sent to a server or written to local storage. If you would rather not type a real password, test one with the same structure instead.
Does the level shown guarantee that my password is safe?
No. Entropy only means something for randomly generated passwords, and it cannot tell whether a password has leaked or been reused elsewhere. Use a separate password for each account and turn on two-step verification where it is offered.
