How to use this password generator
- Pick a length. 16 characters is a strong everyday default. Use 20 or more for email, banking and your password-manager vault.
- Choose character types. Leave all four on unless a website rejects symbols. Turn on Easy to read if you will type the password by hand.
- Copy it and save it in your password manager or the site’s sign-up form. Press New as many times as you like — each result is independent.
The strength meter shows the password’s entropy in bits — a measure of how many guesses an attacker would need. Every extra bit doubles the work. A 16-character password using all 94 printable characters has about 105 bits, which is far beyond what any cracking rig can brute-force.
What makes a password strong in 2026?
Current guidance from the U.S. National Institute of Standards and Technology (NIST SP 800-63B, Revision 4, published in 2025) changed a lot of old advice:
- Length matters most. NIST asks services to require at least 15 characters when a password is the only factor, and at least 8 when it is combined with multi-factor authentication.
- Randomness beats “clever”.
Summer2026!follows every composition rule and is still one of the first guesses in any cracking dictionary. Randomly generated characters have no pattern to exploit. - Unique for every account. Most account takeovers are credential stuffing: a password leaked from one site is tried on hundreds of others. A unique password stops that chain.
- No forced rotation. Change a password when there is evidence of a breach — not on a calendar. Scheduled changes push people toward predictable patterns.
Why you can trust this generator
Passwords are created with crypto.getRandomValues(), the cryptographically secure random number generator built into every modern browser. We use rejection sampling, so every character in the set is exactly equally likely (simple generators that use Math.random() or a plain modulo are slightly biased). The page makes no network requests while generating, sets no tracking cookies, and keeps history only in the open tab. You can load the page, switch off your internet connection, and it keeps working.
Tip: You only need to remember one strong password — the one that unlocks your password manager. Make that one a 6-word passphrase and let the manager store random passwords for everything else.
All free password tools
Different situations need different kinds of secrets. Pick the tool that fits:
Password generators
- Password GeneratorThe main generator: any length from 4 to 128, every character type.
- Random Password GeneratorTruly random passwords from your device’s crypto RNG.
- Strong Password GeneratorDefaults tuned for maximum strength: 20 characters, all types.
- Secure Password GeneratorHow the generation itself is kept private and tamper-proof.
- Alphanumeric Password GeneratorLetters and numbers only — for sites that reject symbols.
- Temporary Password GeneratorReadable one-time passwords for onboarding and resets.
- Bulk Password GeneratorUp to 1,000 unique passwords at once, downloadable as .txt.
Words & usernames
- Passphrase GeneratorDiceware-style passphrases from the 7,776-word EFF list.
- Memorable Password GeneratorEasy-to-remember passwords: words, capitals and digits.
- Pronounceable Password GeneratorPasswords you can say out loud, built from syllables.
- Username & Password GeneratorRandom usernames with a matching strong password.
Wi-Fi, PIN & devices
- Wi-Fi Password GeneratorWPA2/WPA3 keys that are strong and easy to type on TVs.
- Wi-Fi QR Code GeneratorLet guests join your network by scanning a QR code.
- PIN GeneratorRandom 4, 6 or 8-digit PINs that avoid 1234 and 0000.
Hashing & security tools
- Password Strength CheckerTest any password offline: entropy, patterns, crack time.
- Password Hash GeneratorMD5, SHA-1, SHA-256, SHA-512 and NTLM hashes, live.
- Bcrypt GeneratorCreate and verify bcrypt hashes with adjustable cost.
- Htpasswd GeneratorApache & Nginx .htpasswd lines with bcrypt or APR1.
- TOTP GeneratorLive 6-digit one-time codes from a Base32 secret.
Passwords by length
- 8 Character Password GeneratorRandom 8-character passwords: the bare minimum.
- 10 Character Password GeneratorRandom 10-character passwords: a modest step up from 8, but still below modern recommendations.
- 12 Character Password GeneratorRandom 12-character passwords: a solid everyday length for random passwords.
- 14 Character Password GeneratorRandom 14-character passwords: a common corporate-policy minimum with comfortable headroom.
- 15 Character Password GeneratorRandom 15-character passwords: the NIST minimum for passwords used without multi-factor authentication.
- 16 Character Password GeneratorRandom 16-character passwords: an excellent default for accounts stored in a password manager.
- 20 Character Password GeneratorRandom 20-character passwords: a high-security choice for email, banking and admin accounts.
- 24 Character Password GeneratorRandom 24-character passwords: very strong.
- 32 Character Password GeneratorRandom 32-character passwords: key-grade strength for API secrets, tokens and encryption passphrases.
- 64 Character Password GeneratorRandom 64-character passwords: the maximum many systems accept.
Last updated: · Reviewed by the Password Generator team