Password Generator
Generate strong random passwords instantly in your browser. Free, private, and no signup required.
Generate a password
Password length
Custom length
Character Sets
Options
Generated password
Password strength
Very strong
20 characters
4 character sets
Password at a glance
Length
20 characters
Character sets
Lowercase, Uppercase, Numbers, Symbols
Randomness
Generated using Web Crypto API.
Processing
100% in your browser.
Your passwords stay private.
Everything is generated locally in your browser. Nothing is uploaded to our servers.
About generating passwords locally
Password Generator builds a random password in this browser with Web Crypto. Choose length (20 is the default; 16+ is a strong baseline) and character sets: lowercase, uppercase, digits, symbols. Optional controls require one character from each selected set and can exclude look-alikes (i, l, 1, L, O, 0). Regenerate draws a new string with the same options. Nothing is stored by Toolora. Show/hide only affects this tab.
This is not a password manager and not a breach monitor. Do not generate production credentials on a shared computer. Exclude-ambiguous makes typing easier and slightly smaller alphabet — turn it off if you want the full set. Password Strength scores a string you already have; this page creates one. Bcrypt Hash if you need to store a $2 hash of a password you will remember elsewhere.
Related: Password Strength, Bcrypt Hash, UUID Generator, Hash Generator. Do not HMAC a password to store it — HMAC is not a password hash.
Strong passwords at a glance
16+ characters
Longer passwords are stronger. 20 is the default; 32 or 64 is better for important accounts.
Mix character sets
Combine letters, numbers, and symbols unless a site forbids them.
Save it safely
Copy into a password manager. Check strength separately if you want a second opinion.
What makes a password strong?
Length and randomness matter most. A long random password is harder to guess or brute-force than a short phrase with substitutions.
Learn moreCommon Use Cases
New account sign-ups
Password manager entries
API tokens and app secrets
Shared staging credentials
One-time recovery codes
Are generated passwords stored?
No. Values are created with Web Crypto in this browser and are not saved by Toolora. Treat them as secrets once you copy them.
Learn moreRelated password tools
Password Strength Checker
Estimate password strength from length and character variety. The score updates as you type.
Bcrypt Hash / Verify
Hash a password with bcrypt, or verify a password against an existing hash — locally in your browser.
Hash Generator
Generate SHA-1, SHA-256, SHA-384, or SHA-512 hashes using various encodings. Hashing is commonly used to verify integrity and fingerprint data.
UUID Generator
Generate UUIDs instantly in your browser. Free, private, and no signup required.
HMAC Generator
Generate HMAC (Hash-based Message Authentication Code) using various algorithms. HMAC is commonly used to verify the integrity and authenticity of messages.
Password Generator FAQ
It creates a random password in your browser with Web Crypto using the length and character sets you select (lowercase, uppercase, numbers, symbols). 20 is the default; 16+ is a strong baseline. Nothing is stored by Toolora.
It omits look-alike characters (i, l, 1, L, O, 0) so the password is easier to read. Turn it off if you want the full character set. Require-each-set forces one character from every selected class.
Not on a shared computer. This is not a password manager. Password Strength scores a string you already have; Bcrypt Hash stores a $2 hash. Close the tab to drop the secret.