Start a project

Tool 47 of 57 · Security

Password & Passphrase Generator

Make strong, random passwords or easy-to-type passphrases with your device's secure random generator. Nothing is stored or sent.

Password & Passphrase Generator at a glanceIllustration: 1, Length and characters; 2, processed in your browser; 3, Strong passwords.Password & Passphrase Generator1Length and characters3Strong passwords2In yourbrowser
1 Length and characters 2 processed on your device 3 Strong passwords

Password & Passphrase Generator

Settings

Made with your device's secure random generator (crypto.getRandomValues), with no bias. Nothing is stored or sent.

Passwords

All of them

01

What it does

Makes strong random passwords or memorable passphrases on your device, with the strength shown in bits.

  • Up to 128 characters from the sets you choose
  • Memorable passphrases from a built-in word list
  • Look-alike characters left out if you like
  • Strength in bits and an estimated cracking time

02

Private by design

Everything happens in your browser. Nothing you type, paste or upload is sent anywhere, and it keeps working offline once the page has loaded.

03

What you get

A list of passwords, with a Copy and a Download button on every result.

  • Passwords
  • Security
  • Passphrase

Why it matters

Website projects create passwords constantly: hosting, databases, CMS admins, FTP and client accounts. Reused or guessable passwords are still the most common way small business sites get hacked.

A password manager is the best answer, and this generator suits it: long random passwords, or passphrases when you need to type one. They're made with crypto.getRandomValues on your device and never leave it.

How it works

  1. InputLength, character sets or word count
  2. In your browserUnbiased picks from crypto.getRandomValues
  3. OutputPasswords or passphrases with their strength

Where it fits in a designer's workflow

  1. Plan
  2. Design
  3. Build
  4. Test
  5. Launch
Setting up hosting, CMS and client accounts.

By the numbers

Entropy of different password settings0 to 9, 6 chars: 19.9 bits; a to z, 8 chars: 37.6 bits; Letters + digits, 12 chars: 71.5 bits; Letters, digits, symbols, 16 chars: 103.9 bits; Letters, digits, symbols, 20 chars: 129.8 bits; 4 random words (550-word list): 36.4 bits; 5 random words (550-word list): 45.5 bits; 6 random words (550-word list): 54.6 bits60800 to 9, 6 chars19.9 bitsa to z, 8 chars37.6 bitsLetters + digits, 12 chars71.5 bitsLetters, digits, symbols, 16 chars103.9 bitsLetters, digits, symbols, 20 chars129.8 bits4 random words (550-word list)36.4 bits5 random words (550-word list)45.5 bits6 random words (550-word list)54.6 bits
Computed as length × log2(pool size), the same maths the generator shows. The passphrase rows use its own 550-word list. Each extra bit doubles the guesses needed; length matters more than symbols. Source: NCSC: three random words; NIST SP 800-63B.
Show the numbers as a table
SettingBits of entropy
0 to 9, 6 chars19.9
a to z, 8 chars37.6
Letters + digits, 12 chars71.5
Letters, digits, symbols, 16 chars103.9
Letters, digits, symbols, 20 chars129.8
4 random words (550-word list)36.4
5 random words (550-word list)45.5
6 random words (550-word list)54.6

How to use it

  1. Choose random characters or a passphrase.
  2. Set the length and the character types or the number of words.
  3. Press Generate new.
  4. Save the one you use in a password manager.

FAQ

How long should a password be?

At least 16 random characters, or six random words. That's beyond any realistic guessing attack.

Are passphrases really as strong?

Each word adds bits equal to log2 of the list size; the strength meter shows the exact total. Six or more words, plus a number, is very strong.

Is this safe to use online?

The passwords are made in your browser and aren't sent or stored. The page works offline once loaded, if you'd rather disconnect.

Why avoid look-alike characters?

So a password can be read aloud or typed from paper without mixing up 0 and O or 1 and l.

Work with me

Want a site that gets these right?

I build fast, accessible websites and web apps that pass these checks from day one. Tell me about your project and I'll reply personally with honest next steps.

All developer tools · Back to leej.uk