Free Password Generator
Strong, unique passwords made locally in your browser. Strong random, memorable phrases, EFF passphrases, or numeric PINs — never sent to a server.
Two short words plus a number — easy to type, hard to forget. Slide for more or less complexity.
Frequently asked questions
What makes a password strong?
A strong password is long, random, and unique. Length matters more than complexity: a 16-character random password resists brute-force attacks that would crack an 8-character one with symbols in seconds. Current NIST guidance (SP 800-63B) recommends at least 8 characters and emphasises length over forced character classes.
The default here is 16 characters with mixed case, digits, and symbols — about 100 bits of entropy, comfortably beyond any feasible brute-force attack today.
Are these passwords really random?
Yes. We use crypto.getRandomValues() — the browser's cryptographically secure random source, the same one used by HTTPS and modern password managers. We never use Math.random(), and we apply rejection sampling to remove modulo bias.
Can I use these for net banking, UPI, and government portals?
Yes. The strong-random and passphrase modes exceed every banking and government password standard we know of. Pair the password with a password manager and turn on two-factor authentication on financial accounts (your bank's mobile app, UPI PIN, Aadhaar OTP) for the strongest protection.
Do you store or log generated passwords?
No. Generation runs entirely in your browser. Open DevTools → Network and click Regenerate — you'll see zero network requests. Plausible analytics tracks page views only, never the password itself.
What is a passphrase?
A passphrase is several random words joined together, like correct-horse-battery-staple. Four random words from the EFF short wordlist (1,296 words) give about 41 bits of entropy; six give 62 bits — comparable to a 10-character random password but easier to type and remember.
How long should my password be?
For accounts saved in a password manager: 16+ characters, fully random. For accounts you must type or recall: a 5- to 6-word passphrase is the best balance of security and usability.
Should I use a different password for every account?
Yes — always. Password reuse is the single biggest cause of account takeovers. When one site is breached, attackers immediately try the leaked credentials against hundreds of others (credential stuffing). A password manager makes uniqueness practical.