Toolstia / Password generator
Generate a strong password
Pick a length and the character types you want, and get a random password straight away. It is made in your browser with its secure random generator, and it is never sent or saved.
Passwords are created in your browser with its secure random generator and are never sent or stored.
How it works
- Set the length with the slider.
- Choose which character types to include.
- Copy the password, or generate a new one.
How long should it be?
Length matters most. For important accounts use at least 16 characters. Every extra character multiplies the work needed to guess the password.
The strength figure
The tool shows the bits of randomness, which is the length times the log of the character pool size. 80 bits or more is very strong against guessing. It does not protect against a password being reused or stolen by malware.
Look-alike characters
Turn on the look-alike option if you will read the password aloud or type it by hand. It avoids O, 0, l, 1 and I.
Use a password manager
Random passwords are hard to remember. Store them in a password manager and use a different one for every site.
Questions
Is the password stored or sent anywhere?
No. It is generated in your browser and disappears when you close or refresh the page.
Is it really random?
It uses the browser secure random generator (crypto.getRandomValues), not Math.random, and avoids bias when picking characters.
Does it include at least one of each type?
Yes. Each type you tick appears at least once, then the order is shuffled.
Why do some sites reject symbols?
A few sites limit which symbols are allowed. Untick symbols and use a longer password.