Free · Private · No sign-up
Random Password Generator
Create strong, unique passwords in one click. Every password is generated on your device and never sent to our servers.
- Runs in your browser
- Web Crypto randomness
- Nothing stored or logged
All free security tools
Everything runs in your browser. No accounts, no uploads, no tracking of what you type.
Password & account generators
Security checks
Developer tools
Why people trust GenPass
Private by design
Generators run locally in your browser. Passwords are never sent to or stored on our servers.
Real randomness
We use the Web Crypto API, the same secure random source browsers use for encryption keys.
Proven methods
zxcvbn strength scoring, the EFF Diceware wordlist and Have I Been Pwned k-anonymity checks.
Password & security guides
How to use the random password generator
- Pick a length. Drag the slider anywhere from 8 to 32 characters. For most online accounts 16 characters is a sensible default; for a password manager master password or an email account, go longer.
- Choose character types. Uppercase, lowercase, numbers and symbols are all on by default. Turn a type off only if a website refuses it.
- Avoid look-alike characters (optional). “Avoid similar” removes characters such as
l,1,I,o,0andO. Use it when you will have to read or type the password by hand, for example on a TV or a printed Wi-Fi card. - Generate and copy. A new password appears every time you change an option or press the button. The copy icon puts it on your clipboard, and the strength bar shows how resistant it is to guessing.
How the passwords are made
Every password is built inside your browser using the Web Crypto API (crypto.getRandomValues), the same cryptographically secure random source browsers use for encryption keys. Nothing you generate is sent to our server, logged or stored. You can even disconnect from the internet after the page loads and the generator keeps working.
The strength of a random password comes from two things: its length and the size of the character pool. Each character drawn from the full pool of upper and lowercase letters, digits and symbols adds roughly six bits of entropy, so a 16-character password has close to 100 bits, far beyond what anyone can brute-force. Adding length helps much more than adding a single symbol, which is why the length slider matters most.
Recommended lengths
| Use | Suggested length | Why |
|---|---|---|
| Everyday website accounts | 16 characters | Strong enough that the site's own security, not your password, becomes the weak point. |
| Email, banking, cloud storage | 20+ characters | These accounts can reset every other account, so they deserve extra margin. |
| Wi-Fi (WPA2/WPA3) key | 20–32 characters | Wi-Fi keys can be attacked offline, so length matters more than memorability. |
| Password manager master password | Use a passphrase | You must type it from memory, so 6+ random words beats a random string you'll forget. |
Which password generator do you need?
This page creates a classic random password. GenPass also has generators for more specific jobs:
- Passphrase generator: memorable random-word passwords, ideal for a master password.
- Bulk password generator: up to 100 passwords at once, downloadable as CSV, for onboarding staff or test accounts.
- Wi-Fi password generator: a strong WPA2/WPA3 key plus a QR code guests can scan.
- Password generator without special characters: letters and numbers only, for sites that reject symbols.
- Pronounceable password generator: easy to read aloud or type on a TV remote.
- PIN generator: random 4, 6 or 8 digit codes.
- Password from text: turn a sentence you remember into a stronger password.
- Username generator: a matching random username for a new account.
- पासवर्ड जनरेटर (हिंदी): the same generator with Hindi instructions.
Good password habits
- Use a different password for every site. Most account takeovers today come from “credential stuffing”, where passwords leaked from one site are tried on others.
- Store passwords in a password manager rather than a notes app or spreadsheet. Then you only need to remember one strong master passphrase.
- Turn on two-factor authentication (an authenticator app or security key) for important accounts. It protects you even if a password leaks.
- Check old passwords with our password breach checker and replace any that have appeared in a breach.
Frequently asked questions
Is it safe to generate a password on a website?
It is safe when generation happens locally, as it does here. The password is created by JavaScript running on your own device and never leaves it. Avoid any generator that has to “fetch” passwords from a server.
Why does the website I'm signing up for reject my password?
Some sites limit length or ban certain symbols. Lower the length, or switch off symbols, and generate again. Keep the length as high as the site allows.
Should I change my passwords regularly?
Current guidance from NIST and the UK NCSC is to change a password when there is a reason to, such as a breach or suspected compromise, rather than on a fixed schedule. A long, unique password can stay in place.
Can I make a password I can remember?
Yes. Try the passphrase generator for random-word passwords, or the human-friendly generator for pronounceable ones.