All tools / Security & identifiers
Password and secret generator
Generate passwords and secrets with your browser's cryptographically secure random source.
Generated
Same thing in a terminal
Common questions
How long should a password be?
For accounts, 16 or more random characters is plenty when you use a password manager. For secrets that machines use, such as API keys or session signing keys, use at least 32 random bytes (256 bits).
What does entropy mean?
It measures how many guesses an attacker would need. Each extra bit doubles the work. Around 80 bits is out of reach for online and most offline attacks; 128 bits is out of reach for anyone.
Is this really random?
Yes. It uses crypto.getRandomValues, the browser's cryptographically secure generator, with rejection sampling so every character is equally likely.
Are the passwords stored or sent anywhere?
No. They are generated on your device and disappear when you close the tab.