Password Generator
Generate strong passwords and passphrases with a live zxcvbn strength meter. Nothing is sent anywhere.
About the Password Generator
This is a password and passphrase generator with a live strength meter. Reused or short passwords are why one leaked login can open several accounts, and characters you invent in your head follow predictable patterns. The tool builds each string from a random draw across the character sets you enable, then scores it with the zxcvbn library so you see its strength before you paste it into a form.
Character passwords are assembled with crypto.getRandomValues, the browser's cryptographic random source, picking from any mix of uppercase, lowercase, digits, and the symbol set !@#$%^&*()-_=+[]{};:,.<>/?. Passphrase mode instead draws whole words from a built-in list, capitalizes each, and splices in a random digit. Whenever your options change the value regenerates and zxcvbn re-scores it, showing a five-segment meter and an estimated offline crack time.
The generator is free, needs no account, and runs entirely in your browser. There is no server call: the random draw, the strength scoring, and the copy action all happen on your machine, so the passwords you create are never transmitted or logged. Regenerate as often as you like, drag the length up to 64 characters, and copy the result with one click.
How to use the Password Generator
- 1Choose Password for a character string or Passphrase for word-based output using the two toggle buttons at the top.
- 2In Password mode, drag the Length slider (4 to 64), tick Uppercase, Lowercase, Digits, and Symbols, and enable Avoid 0/O 1/l/I to strip lookalike characters.
- 3In Passphrase mode, set the Words slider (3 to 10) and type a Separator such as - or . in the separator box.
- 4Read the strength meter and Crack time to judge whether to keep the value or raise the length, then click Regenerate for a fresh one and Copy to your clipboard.
What you can use it for
New account signup
When a site demands upper, lower, digit, and symbol, turn on all four character sets, set length to 20, and copy the result into the password field. The meter confirms it reads very strong before you submit.
A master password you can type
For a vault or laptop login you enter by hand, switch to Passphrase mode with five or six words and a dash separator. Word strings are far easier to retype correctly than a wall of symbols, yet stay long.
Codes read over the phone
Setting up a router or reading a temporary password to a colleague gets error-prone with lookalike characters. Enable Avoid 0/O 1/l/I so the output drops zero, capital O, one, lowercase L, and capital I, cutting mistakes.
Entropy, and why word count matters here
Password strength comes down to entropy: the number of equally likely values an attacker must search. For a character password that is the character-set size raised to the power of the length, so each extra character multiplies the total. That is why the length slider moves the crack time far more than any single checkbox.
Passphrase entropy works differently. It depends on how many words the list holds and how many you chain, not their length. Because this tool ships a roughly 64-word sample instead of the full 7,776-word list, each word adds less entropy than a full Diceware passphrase, so use more words when strength matters.
Frequently asked questions
Are the passwords sent to a server?
No. Character passwords are drawn with crypto.getRandomValues, the browser's secure random generator, and the zxcvbn strength check runs on the same page. Nothing about the generated value leaves your device. The tool has no backend that receives, stores, or logs what you create, so you can generate real passwords here.
What does the crack time actually mean?
The figure comes from zxcvbn and shows its offline_slow_hashing estimate: how long an attacker running about ten thousand guesses per second would need. It is a modeled estimate, not a guarantee, and it discounts common patterns and dictionary words. Treat it as a relative guide between candidates.
How large is the passphrase word list?
The passphrase list is a built-in sample of about 64 words, not the full 7,776-word EFF dictionary. With fewer words to choose from, each word adds less entropy than a full Diceware list would, so lean toward more words, or character mode, for maximum strength.
Why does my password change when I toggle an option?
Any change to length, a character-set checkbox, word count, or separator triggers an immediate regenerate so the value always matches your settings. If you liked a previous value, copy it before adjusting options, because there is no history and the old value cannot be recovered.
What if I turn off every character type?
In Password mode the output needs at least one of Uppercase, Lowercase, Digits, or Symbols enabled. If you uncheck all four, there are no characters to draw from and the field shows a dash instead of a password. Re-enable any set to get output again.