Can I generate an 8, 12, 16 or 32 character password?

Yes. Use the Length box for any whole length from 4 to 128. The quick choices are 8, 12, 16 and 24. A fixed length alone is not a strength promise: the alphabet, random generation, the receiving site and how the credential is stored all matter. A name or phrase you choose yourself is not the same random process.

Can I generate passwords in bulk or download a list?

Set Batch count from 1 to 100. Each password or passphrase is drawn independently using the settings on screen; repeats are possible. Copy batch puts one value per line on the clipboard, and Download TXT exports the same list with a final newline. Generated batches and the last five main values remain in this page only. A clipboard or downloaded file is a copy you choose to keep, so handle it like other credentials.

What does the entropy number mean?

For passwords it is the base-2 logarithm of the permitted output space, accounting for the rule that every enabled character set appears. Sixteen characters with all four sets is about 105 bits. For passphrases it describes the random word choices: each of the 2,048 words contributes 11 bits, and a random final digit adds log2(10), about 3.3 bits. Without a non-letter separator or capitalised boundaries, different word sequences can join to the same text, so that choice entropy is an upper bound for the final string. Strength labels are choice-space bands, not a measured cracking time or an audit of an existing password.

Can I use a strong password on any site?

Check the site’s permitted length and symbols, and store credentials in a password manager you trust. This tool does not know its policy, hash scheme, account recovery rules or whether a password has been reused or leaked.

Are generated values saved or sent anywhere?

Generation runs in this browser. Generated values and supplied word lists are not uploaded, included in analytics events, put in links or saved to local storage. Valid settings you explicitly change are remembered when storage is available; opening a preset page does not overwrite unrelated remembered settings. History, batches and supplied lists disappear on reload. Copy and TXT downloads are deliberate exports you control.

Can this check how strong an existing password is?

No. The displayed bits count this generator’s permitted output choices for the selected settings. It does not accept an existing password for a breach check, predict cracking time or audit a provider’s storage and account-recovery rules.

Strong Password Generator

Generate a 16-character password with lowercase letters, uppercase letters, digits and punctuation enabled. This preset explicitly selects all four sets, so a prior symbols-off visit does not change its starting job. At these settings the permitted space is about 105 bits; the displayed strength label is a choice-space band, not a cracking-time forecast. Change length, sets or look-alike exclusions for the receiving site, and generate one value or a batch of up to 100.

ReadyYour password appears here

Drawn in this tab the moment the page is ready

Type

Length

Include

Entropy: waiting

Strength: waiting

Pool: 94 characters

Look-alikes

Batch count

The length box takes any number from 4 to 128, so an 8, a 12 or a 16 character rule is one keystroke away. Turning a set off drops it from the pool and lowers the entropy shown; excluding look-alikes removes 6 characters (0 O 1 l I |) for a password you have to read off a screen and type somewhere else.

Made here, kept here. Every character is drawn from crypto.getRandomValues on your own device by rejection sampling, so no position in the alphabet is favoured. The result is not sent anywhere, does not enter an analytics event and is never written into a link, and the only thing this page remembers between visits is your settings. A supplied word list stays in page memory and is never saved. It cannot know the rules a particular site enforces, so check its length limit and which symbols it accepts before you save one.

Accuracy. Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.

Common questions

Can I generate an 8, 12, 16 or 32 character password?: Yes. Use the Length box for any whole length from 4 to 128. The quick choices are 8, 12, 16 and 24. A fixed length alone is not a strength promise: the alphabet, random generation, the receiving site and how the credential is stored all matter. A name or phrase you choose yourself is not the same random process.
Can I generate passwords in bulk or download a list?: Set Batch count from 1 to 100. Each password or passphrase is drawn independently using the settings on screen; repeats are possible. Copy batch puts one value per line on the clipboard, and Download TXT exports the same list with a final newline. Generated batches and the last five main values remain in this page only. A clipboard or downloaded file is a copy you choose to keep, so handle it like other credentials.
What does the entropy number mean?: For passwords it is the base-2 logarithm of the permitted output space, accounting for the rule that every enabled character set appears. Sixteen characters with all four sets is about 105 bits. For passphrases it describes the random word choices: each of the 2,048 words contributes 11 bits, and a random final digit adds log2(10), about 3.3 bits. Without a non-letter separator or capitalised boundaries, different word sequences can join to the same text, so that choice entropy is an upper bound for the final string. Strength labels are choice-space bands, not a measured cracking time or an audit of an existing password.
Can I use a strong password on any site?: Check the site’s permitted length and symbols, and store credentials in a password manager you trust. This tool does not know its policy, hash scheme, account recovery rules or whether a password has been reused or leaked.
Are generated values saved or sent anywhere?: Generation runs in this browser. Generated values and supplied word lists are not uploaded, included in analytics events, put in links or saved to local storage. Valid settings you explicitly change are remembered when storage is available; opening a preset page does not overwrite unrelated remembered settings. History, batches and supplied lists disappear on reload. Copy and TXT downloads are deliberate exports you control.
Can this check how strong an existing password is?: No. The displayed bits count this generator’s permitted output choices for the selected settings. It does not accept an existing password for a breach check, predict cracking time or audit a provider’s storage and account-recovery rules.

Passwords and passphrases come from the browser's own cryptographic randomness, made on your device and never sent anywhere. Entropy describes the random choices, not a cracking-time prediction. It cannot know a site's own password rules.