How to use the Password Generator
- Pick a length. 16 or more is recommended.
- Choose which character types to include, or switch to a passphrase.
- Click ↻ for a new one and Copy to use it.
Formula used
Characters are chosen with crypto.getRandomValues and rejection sampling, so every character is equally likely.
Worked examples
| Length | Character set | Entropy | Strength |
|---|---|---|---|
| 8 | lowercase only (26) | 38 bits | Weak |
| 12 | all types (~90) | 78 bits | Strong |
| 16 | all types (~90) | 104 bits | Very strong |
| 5 words + number | passphrase (319-word list) | 48 bits | Fair |
| 7 words + number | passphrase (319-word list) | 65 bits | Strong |
Frequently asked questions
Are these passwords stored anywhere?
No. They are created in your browser and never sent to our server.
How long should my password be?
At least 12 characters, and 16 or more for email, banking and admin accounts.
Is a passphrase better than a password?
Long passphrases are easier to remember. For accounts kept in a password manager, a random password is stronger per character.
Should I change passwords regularly?
Current advice is to change a password only if it may have been exposed, and to use unique passwords plus two-factor authentication.
What are look-alike characters?
Characters like O and 0, or l, I and 1, that are easy to confuse when typing a password by hand.
Our team builds and tests every tool by hand, checks each formula against official sources (IRS, HMRC, the Income Tax Department of India, CBSE, NHS, WHO) and reviews pages whenever rules change. Last reviewed on . Spotted a mistake? Tell us.