Create a strong, random password that is extremely hard to crack

Free online password generator. Choose the length and which character types to include, and get a random password instantly. It shows the strength of each password and an estimate of how long it would take to crack. Everything runs in your browser, the password is never sent anywhere or stored, and no registration is needed.

Estimated time to crack:
416324864
Include

How to create a strong password

  • Drag the slider to set the length. 12 characters is a good minimum, 16 or more is better.
  • Choose which character types to include: uppercase, lowercase, numbers and symbols. More types means a stronger password.
  • Watch the strength bar and the estimated time to crack update as you change the settings.
  • Click the copy button and paste the password where you need it.

How long would it take to crack a password?

The estimates below assume an attacker who can try about 10 billion guesses per second, which is realistic for a stolen password database. Longer passwords with more character types are dramatically harder to crack.

PasswordEstimated time to crack
8 lowercase lettersA few seconds
8 letters and numbersA few hours
12 mixed charactersTens of thousands of years
16 mixed charactersBillions of years
20+ mixed charactersLonger than the age of the universe

Password best practices

  • Use a different password for every account. A leak on one site should never expose the others.
  • Store your passwords in a password manager instead of trying to memorize them.
  • Turn on two factor authentication wherever it is offered.
  • Never reuse a password that has appeared in a data breach.

FAQ about the password generator

Is this password generator safe to use?

Yes. The password is created entirely in your browser using your device’s secure random generator. It is never sent to our server, saved or logged, so no one else can see it.

What makes a password strong?

Length and variety. A strong password is at least 12 characters and mixes uppercase and lowercase letters, numbers and symbols. The strength bar on this page shows how your choices affect it.

How does the tool generate random passwords?

It uses the Web Crypto API (crypto.getRandomValues), the same source of randomness browsers use for security features. This is far more unpredictable than an ordinary random function.

What are the most common passwords to avoid?

Avoid predictable passwords such as these, which appear in almost every breach list:

  1. 123456
  2. 123456789
  3. qwerty
  4. password
  5. 12345
  6. qwerty123
  7. 1q2w3e
  8. 12345678
  9. 111111
  10. 1234567890

Should I exclude ambiguous characters?

Turn on “Exclude ambiguous characters” if you may need to type the password by hand, so you do not confuse the letter O with the number 0, or the letter l with the number 1. For passwords stored in a manager it makes no difference.

Is the generator free?

Yes, it is completely free, with no registration and no limit on how many passwords you can create.

Total of 21,486 passwords generated