Loadingβ¦
Loadingβ¦
Generate strong random passwords in your browser: choose length and character types, skip look-alike characters, and make up to 500 at once.
Also covers: Strong password generator Β· Random password generator Β· Secure password generator
Generatingβ¦
20 characters is a strong default. Longer is always stronger; some sites cap the length, so shorten it if a site rejects it.
Uppercase, lowercase, digits, and symbols. Skip look-alikes (I, l, 1, O, 0) if you'll type the password by hand, and exclude any symbols a site doesn't accept.
Every password is created from your browser's secure random generator. The entropy shown tells you how hard it is to guess.
At least 16 characters for important accounts. A random 16-character password using all character types has about 104 bits of entropy β far beyond what anyone can brute-force.
How many guesses an attacker would need, as a power of two: 80 bits means 2^80 possibilities. It's the right measure for generated passwords because the attacker is assumed to know exactly how they were made.
No β use a password manager to store a different random password for every site. For the few you must remember (like the manager's own), use a passphrase instead.
No. Everything is generated and processed in your browser with its built-in cryptography. Nothing you type or generate is uploaded, logged, or stored.
Passwords
Generate strong, memorable passphrases from the EFF's 7,776-word list, picked with secure randomness. Choose word count, separators, and capitals.
Passwords
Generate random 4, 6, or 8-digit PINs that skip easy guesses like 1234, 1111, years, and dates. Secure randomness, generated in your browser.
Passwords
Check how strong a password really is: estimated crack times, the words and patterns that make it guessable, and tips to improve it. Never leaves your browser.
Keys
Generate random strings, API keys, and secret keys: pick the length and characters (hex, Base64url, alphanumeric, custom) or a key size in bytes. Cryptographically secure.
2FA
Get live 2FA codes from a TOTP secret or otpauth:// link, check a code, or create a new secret with a QR code for authenticator apps. RFC 6238.
Hash
Generate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE, and CRC32 hashes of text as you type, create HMAC signatures, and check a hash for a match.