ZapKit

Password Generator

Generate strong, random passwords in your browser, choose the length and characters, and see how strong each one is. Nothing is sent or saved.

What is a password generator?

A password generator creates random passwords that are hard to guess, unlike the names, dates and patterns people choose themselves. Reused and predictable passwords are behind most account takeovers, so a fresh random password for each site is one of the simplest protections there is.

This generator lets you choose the length and which characters to use, avoids confusing look-alikes if you like, and creates up to 20 passwords at once with a strength meter based on entropy. It runs entirely in your browser using cryptographic randomness, and only your settings, never the passwords, are kept in the page address.

How to use the Password Generator

  1. 1.Set the length

    16 characters or more is a good default; longer is stronger.

  2. 2.Choose characters

    Tick the character sets a site allows, and avoid look-alikes if you'll type it by hand.

  3. 3.Copy and store

    Copy one, save it in your password manager, and press Generate new for more.

Example: 16 characters, all four sets

Uppercase, lowercase, numbers and the 25 symbols offered here:

Possible characters
87
Entropy
16 × log₂ 87 ≈ 103 bits
Rating
Very strong
Same length, lowercase only
75 bits

entropy = length × log₂(pool size)

Adding four more lowercase letters to the lowercase-only password brings it to 94 bits, nearly matching the mixed one.

What makes a password strong

Strength comes from randomness and length. Entropy, in bits, is length × log₂(number of possible characters): 16 characters from all four sets, 87 possible characters, is about 103 bits, far beyond what can be guessed. Each extra character adds more strength than any special-character rule.

Passwords here use the browser's cryptographic random generator, with at least one character from every set you tick, and are never put in the page address, sent or stored. Use a different password for every site and keep them in a password manager.

Frequently asked questions

How long should a password be?

At least 12 characters, and 16 or more for important accounts. Length matters more than complexity.

Is it safe to generate a password online?

Here, yes: it's made on your own device and never leaves it. Even the address bar only holds your settings.

What does avoiding look-alikes do?

It leaves out characters like 0 and O or 1, l and I that are easy to confuse when reading or typing.

How many bits is strong?

Above about 80 bits is very strong for online accounts; 60–80 is strong; below 40 is weak.

More Utilities tools