Generate secure random passwords and passphrases. Cryptographically random, 100% client-side.
Generated with crypto.getRandomValues() (CSPRNG). No data is transmitted. Test strength with our password checker.
Humans are terrible at creating random passwords. We reuse patterns, substitute letters predictably (@ for a, 3 for e), and rely on dictionary words. Attackers exploit these habits with rule-based cracking that tests millions of human-like mutations per second. A cryptographically random password eliminates this weakness entirely by using the operating system's secure random number generator (CSPRNG).
| Configuration | Pool | 8 chars | 12 chars | 16 chars |
|---|---|---|---|---|
| Lowercase only | 26 | 38 bits | 56 bits | 75 bits |
| Lower + upper + digits | 62 | 48 bits | 71 bits | 95 bits |
| All character types | 88 | 52 bits | 78 bits | 103 bits |
| 5-word passphrase | 200 words | ~38 bits (5 words from 200-word list) | ||
Length matters more than complexity. A 16-character lowercase password (75 bits) is stronger than an 8-character password with all character types (52 bits). Aim for at least 60 bits of entropy.
Random character passwords (e.g., kR9$mP2!xL4@) maximize entropy per character but are hard to type and remember. Use them with a password manager.
Passphrases (e.g., coral-flame-quest-eagle-prism) trade some entropy density for memorability. A 5-word passphrase from a 200-word list has ~38 bits; use 7+ words or a larger dictionary for high-security accounts.
Either way, use a unique password per account and store them in a password manager. Check your existing passwords with our password strength checker or verify they haven't leaked with the breach checker.
No. Passwords are generated entirely in your browser using crypto.getRandomValues(), which is a cryptographically secure random number generator. No data is sent to any server.
At least 14 characters with mixed character types for general accounts. For critical accounts (email, banking, password manager master password), use 20+ characters or a 6+ word passphrase.
This tool uses a 200-word list (~7.6 bits per word). A 5-word passphrase has ~38 bits, suitable for low-risk accounts. For high-security use, increase to 7-8 words or use the random character mode with 16+ characters.