How long should a password be?

At least 16 characters for most accounts in 2026. Every extra character multiplies the difficulty for an attacker, so length matters more than complexity.

Should I use symbols?

Yes when the service allows it. Symbols increase the search space, but length is a bigger factor. A 20-character password without symbols is stronger than a 10-character one with symbols.

What are ambiguous characters?

Letters and digits that look alike (i, l, 1, O, 0). Excluding them makes manual typing easier, but slightly reduces the search space. Use this option for passwords you type often.

What is password entropy?

Entropy is a measure of how random a password is, in bits. The higher the value, the harder it is to crack. 60 bits is enough for most accounts, 80 or more for critical services, 100 or more for encryption.

What is a pronounceable password?

It is a password built from syllables so it can be spoken and remembered, like va-lo-meer-keh. It is less random than a fully random password but easier to dictate and recall.

Is it safe to generate passwords here?

Yes. Generation uses crypto.getRandomValues, a cryptographically secure random source built into your browser. The password never leaves your device and is never transmitted.

Password Generator

Create strong random passwords of any length right in your browser. Four modes: random, pronounceable, numeric PIN, and pattern-based. See the entropy in bits and estimated time to crack. Exclude ambiguous characters. Bulk generate up to 500 at once.

How to use

Choose a mode

Random, pronounceable, numeric PIN, or a password built from a custom pattern.

Set the rules

Adjust length, character sets and exclude ambiguous or awkward symbols.

Generate

Click the button — the password appears instantly and never leaves your device.

Copy and use

Copy to clipboard, then paste into the service you are signing up for.

StrengthWeak

Length

Features

Four generation modes

Random, pronounceable, numeric PIN, or a password built from a custom pattern.

Cryptographically secure

Uses the Web Crypto API — the same randomness source TLS uses.

Entropy and crack time

Live estimate of password strength in bits and time-to-crack.

Exclude ambiguous characters

Drop characters that look alike (i, l, 1, O, 0) for easier typing.

Exclude awkward symbols

Skip brackets, quotes and slashes when a service requires typing the password.

Bulk generation

Create up to 500 passwords at once for CSV import or provisioning.

Common use cases

Create a strong password for a new account
Generate a password that is easy to dictate over the phone
Create a PIN for a bank card
Generate passwords that match a service's requirements
Create a password for a Wi-Fi router

Frequently Asked Questions

Related tools

QR Code Generator

Hash Generator

UUID Generator

Open Source License Generator