How long should a password be?

For passwords you store in a password manager, 16 characters or more from letters, digits and symbols is plenty (over 100 bits). Length adds more strength than complexity rules do.

Are these passwords really random?

Yes. They come from crypto.getRandomValues, the browser's cryptographically secure random generator, with no bias toward any character. They're created on your device and never sent or stored.

What does 'bits of entropy' mean?

How many guesses an attacker would need, as a power of two. A password with 80 bits of entropy takes up to 2^80 guesses to find. It's length × log2(size of the character set) for a randomly generated password.

Is my code or data uploaded anywhere?

No. Every tool runs in your browser, so your code, tokens, keys and files are processed on your device and are not sent to our server or stored. Reloading or closing the page clears them.

Yes. Every tool is free with no sign-up and no limits on use. Clearly labeled ads keep it that way.

Does it work on my phone?

Yes. The tools work in any modern browser on phones, tablets and computers, though large files and long code are easier to handle on a computer.

Password Generator

Create strong, random passwords that never leave your browser.

100% Free
No Sign Up
Works in Your Browser

Password generator

Create strong random passwords

Very strong · 130 bits of entropyBrute force at 10 billion guesses/second: trillions of years or more

Generated in your browser with crypto.getRandomValues. Nothing is uploaded or stored.

More Developer Tools

View all tools

Every everyday developer tool, right in your browser.

No installs. No uploads. No signup.

Browse all 36 tools

Developer tools: 36
Cheat sheets: 10
Bytes uploaded: 0

How to use the password generator

Three steps, all in your browser.

1
Choose what you need
Pick the type and how many. Results appear straight away.
2
Set the options
Choose the length, count or algorithm. The output updates instantly.
3
Copy the result
Copy the output in one click. Nothing is saved or sent anywhere.

Password Generator: what to know

The password generator creates random passwords with crypto.getRandomValues, the browser's cryptographically secure random generator, choosing characters without bias. Pick the length and which sets to include (lowercase, uppercase, digits and symbols), and optionally leave out look-alike characters such as 0, O, 1 and l. A passphrase mode strings random words together instead. Passwords are generated on your device and are never sent or stored.

Strength is shown as bits of entropy, which for a random password is its length times log2 of the number of possible characters. A 16-character password from all four sets (90 characters here) has roughly 104 bits, far beyond what can be guessed. Length adds strength faster than extra character types do, which is why current guidance such as NIST SP 800-63B favors long passwords over complexity rules.

Random passwords are hard to remember, which is the point: store them in a password manager and use a different one for every site, so a breach at one site doesn't unlock your other accounts.

Popular uses

New passwords for accounts, stored in a password manager
Database, Wi-Fi and service account passwords
Test accounts in development and staging
Temporary passwords to share once and change

Tips for the best result

Use at least 16 characters for anything important; more for keys you never type.
If a site rejects symbols, make the password longer instead.
Never reuse a password across sites; a password manager makes unique passwords painless.

Read how JustYourDev works and our privacy details. Code, data and files you use here are processed in your browser and are never sent to our server.