Password generator and strength checker
Pin to your toolsGenerate random passwords, passphrases and PINs, or check how strong a password is.
Runs entirely in your browser. What you type is never sent to our servers.
Strength reads as score/4 · 10^guesses: 0/4 is easy to guess, 4/4 is very hard, and 10^N is roughly how many guesses it takes.
history · 0
Processed input shows up here while this page is open. Reloading the page clears it.
Code examples
Copy and paste these into your own project. Each one uses only the language's standard library, so there is nothing to install.
import { randomInt } from 'node:crypto'
const alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*'
const length = 20
const password = Array.from({ length }, () => alphabet[randomInt(alphabet.length)]).join('')
console.log(password)What it does
Generate random passwords, passphrases and PINs, or check how strong a password is. Everything is made with your browser’s secure random generator, this page shows no ads, and nothing you type or generate is sent, saved or shared.
How to use it
- Choose Password, Passphrase or PIN, and how many you need.
- Set the length and the kinds of characters, or the number of words and the separator.
- Press Generate. The passwords appear in the input, and their strength in the output.
- To check your own, type or paste one password per line.
Examples
A passphrase of six random words from the EFF list:
bonanza-cavity-sneeze-flaky-unfold-tanning
The strength of a typed password reads as score/4 · 10^guesses:
correct horse battery staple → 4/4 · 10^19.7
password → 0/4 · 10^0.5
Good to know
- Six random words are about as strong as a 12-character random password, and far easier to type.
- “No look-alikes” leaves out characters such as
I,l,1,Oand0. - Characters are picked with rejection sampling, so every one is equally likely.
- The score comes from zxcvbn, which looks for common passwords, words, names and keyboard patterns.
What makes a password strong?
Length and unpredictability. A password picked at random by a computer from a large set of characters, or a passphrase of random words, is far harder to guess than anything a person makes up. This tool draws every character with your browser's secure random generator and avoids bias when picking from a list.
Frequently asked questions
Passphrase or password?
A passphrase of 5 or 6 random words from the EFF list is easy to type and remember and about as strong as a 12-character random password. Use a long random password for anything stored in a password manager.
How is strength measured?
The score comes from zxcvbn, which looks for common passwords, words, names, keyboard patterns and repeats the way a cracker would. The bits next to the generator are the effort to guess a password made with your settings.
Is what I type or generate sent anywhere?
No. Everything happens in your browser and this page shows no ads. Share links carry only the settings, never a password. The EFF word list is by the Electronic Frontier Foundation, CC BY 3.0 US.