Only Trusted Password Generator
A strong random password, made on your device. Nothing you generate or check here is sent, logged or stored anywhere.
Free · No uploads · On-deviceGenerated on this device: 0 · Sent anywhere: 0
Options
Password options
Changing any option makes a fresh password. One character from each ticked set is always included.
Strength
About 0 bits of entropy.
Check a password
Check the one you generated, or your own. It stays in this page. Strength scores are estimates, not guarantees.
Type or paste a password to see its estimate.
Passphrase
Prefer words? Make a passphrase
Words come from the EFF large word list (7,776 words). The list loads the first time you make a passphrase, and only then.
Your passwords
Nothing here yet. Generated passwords and passphrases collect here so you can copy them.
This list is held in page memory only. Reload the page and it is gone. Nothing is saved to this device or sent anywhere. Copy anything you want to keep into your password manager.
How it works
Random, and fair about it
The generator uses the browser's built-in secure random source, the same one banking sites rely on for encryption keys. Each character is picked with rejection sampling: random values that would skew the odds are thrown away and redrawn, so every character in the set you picked is equally likely. A weaker method can quietly favour some characters, and guessing tools exploit that.
The checker works the password out from its length and character mix, then looks it up in a list of 10,000 common passwords, loaded only when you first check one. A common password with digits added at the end still counts as common here.
Guide
Using passwords well
- One password per account: reuse is how one leaked site turns into ten hacked accounts.
- Keep them in a password manager: it remembers what you cannot, and fills each password only on the right site.
- Use a passphrase for the master password: five random words are long, strong, and possible to remember.
- Length beats tricks: swapping letters for lookalike symbols adds little. More characters add a lot.
- Turn on two-factor authentication: a stolen password on its own should not be enough to get in.
Questions
Are the passwords generated here sent or stored anywhere?
No. Passwords are generated in your browser, on your device, with the browser's built-in secure random generator. Nothing is transmitted, logged or saved. The history on this page sits in page memory and is gone when you reload or close the tab.
What makes a password strong?
Length, and being random. A random password of 16 or more characters from letters, numbers and symbols takes far longer to guess than a short, clever one. A passphrase of five or more random words is easier to type and remember, and it is just as hard to guess when the words are picked at random.
How accurate is the strength checker?
It is an estimate based on length, character mix and a list of 10,000 common passwords. Strength scores are estimates, not guarantees. The checker cannot know whether a password is a name, a birthday or a phrase about you, and those are the first things an attacker who knows you will try.
Should I use the same strong password everywhere?
No. Use a different password for every account, and keep them in a password manager. If one site leaks its passwords, a unique password limits the damage to that one account. Turn on two-factor authentication where it is offered.
Why does this page warn about a common password with numbers added?
Adding digits to the end of a common word is the first change most people make, so it is the first variant guessing tools try. This checker treats a common password with a simple suffix as common, because attackers do.