Security

Password generator

Create strong, random passwords generated locally.

  • Instant
  • Free
  • Private (processed locally)
  • No sign-up
16

Why use a password generator?

The passwords we invent are predictable: first names, dates, keyboard patterns… Hackers’ tools test billions of combinations per second and know all these tricks. A truly random password removes this predictability and offers a level of security you cannot improvise from memory.

How to generate a strong password

  1. Choose the length

    Set the slider: 16 characters or more is recommended.

  2. Select character types

    Enable uppercase, lowercase, numbers and symbols to widen the alphabet.

  3. Copy your password

    Click the copy icon and paste it into your password manager.

Password strength in figures

2^≈105
Combinations for 16 varied characters
Web Crypto
Browser’s cryptographic random source
0
Passwords transmitted or stored

Strength is measured in entropy: each extra character and each added type increases the number of combinations exponentially. The tool’s gauge estimates this entropy in real time.

Security best practices

  • A unique password per account: essential to limit the damage if there is a leak.
  • Enable two-factor authentication (2FA) wherever possible.
  • Use a password manager to store and fill your credentials securely.
  • Change immediately any password involved in a data breach.

Frequently asked questions

What is a strong password?

A strong password is long (at least 12 to 16 characters), unpredictable and mixes uppercase, lowercase, numbers and symbols. The larger the alphabet and the length, the more the number of possible combinations explodes, making brute-force attacks unrealistic.

Is this generator really safe?

Yes. It uses crypto.getRandomValues, the cryptographic random generator built into the browser, not the (predictable) Math.random function. Above all, the password is created locally: it is never sent over the Internet nor saved.

What password length should I choose?

For an everyday account, 16 characters is a good balance. For a sensitive account (primary email, bank, password manager), aim for 20 characters or more. Length is the most important security factor.

Should I reuse the same password?

Never. If one site is hacked, a reused password endangers all your other accounts. Generate a unique password per service and keep them in a password manager.

How do I remember random passwords?

You don’t have to. Use a password manager (built into your browser or dedicated): it stores them encrypted and fills them in automatically. You only remember a single master password, which is also long and unique.