nwork

Password Generator

Generate strong random passwords. Choose length, include uppercase, lowercase, numbers and symbols. Instant strength meter.

664
Click Generate to create password

How to Use

  1. 1

    Set password length

    Use the slider to choose how long your password should be.

  2. 2

    Choose character types

    Toggle uppercase, lowercase, numbers, and symbols on or off.

  3. 3

    Generate and copy

    Click Generate to create a strong password, then click Copy.

How It Works

This tool generates random passwords using your browser's cryptographically secure random number generator (crypto.getRandomValues()) — the same class of randomness used for security-sensitive operations, not a predictable pseudo-random sequence.

What makes a password hard to guess: entropy

Password strength is measured in bits of entropy, roughly log₂(character-set size ^ length). A 12-character password using lowercase only (26 characters) has about 56 bits of entropy; the same 12 characters drawn from upper+lower+numbers+symbols (~94 characters) has about 79 bits — vastly harder to brute-force even though the length is identical.

Why length matters more than complexity rules

Adding one extra character multiplies the total possible combinations by the character-set size, while adding one more character type only slightly changes the effective set size. This is why a longer password with a smaller character set (e.g. 16 random lowercase words) can be stronger than a short one crammed with symbols — length dominates the math.

Examples

8 vs 16 characters, same character set

An 8-character password from a 94-character set has roughly 52 bits of entropy — crackable by modern hardware in hours to days. A 16-character password from the same set has roughly 105 bits — effectively uncrackable by brute force with current technology.

Choosing a practical setting

For most accounts, 16+ characters with uppercase, lowercase, numbers, and symbols enabled gives strong protection against both online guessing and offline brute-force attempts, while still being something a password manager can store and autofill.

Common Use Cases

  • Generating a unique password for a new account signup
  • Replacing weak or reused passwords flagged by a browser or breach-notification service
  • Creating temporary passwords to share with a client or team member before they set their own
  • Generating Wi-Fi or router admin passwords that need to be long and random rather than memorable

Tips

  • Use a different randomly generated password for every account — password reuse means a single leaked site can expose all your other accounts.
  • Store generated passwords in a password manager rather than memorizing or reusing patterns — this lets you safely use maximum length and randomness everywhere.
  • Nothing you generate here is sent to a server — generation and the strength meter both run entirely in your browser, so the password never leaves your device.

Frequently Asked Questions

Related Tools