Password & Passphrase Generator
Create strong, random passwords or memorable passphrases with a live strength estimate. Generated securely in your browser and never sent anywhere.
—About the Password Generator
Updated June 2026 · 100% client-side — your data never leaves your browser.
Strong, unique passwords are the simplest defence against account compromise. Bytewrench's password generator creates random passwords to your specifications — choose the length and whether to include uppercase letters, numbers and symbols — using the browser's cryptographically secure random source.
Passwords are generated locally and never transmitted, so what you create stays on your device.
See also: Hash generator, UUID generator
Set length and toggle uppercase, lowercase, numbers and symbols.
Uses the browser's secure random generator, not predictable Math.random.
Copy a generated password instantly and regenerate as many as you like.
Passwords are created in your browser and are never sent or stored online.
Frequently asked questions
What makes a strong password in 2026?
Length and randomness matter most. A strong password is long (16+ characters), random rather than based on words or patterns, unique to each account, and stored in a password manager. Mixing character types helps, but a long random string beats a short complex one.
How long should a password be?
Use at least 12-16 characters for everyday accounts and 20+ for high-value ones like email and banking. Each extra character multiplies the number of guesses an attacker needs, so length is the cheapest way to add strength.
Are online password generators safe?
Only if they generate the password locally and never transmit it. This tool runs entirely in your browser using the cryptographically secure crypto.getRandomValues source, so passwords are never sent anywhere. Avoid generators that send your settings to a server.
What is password entropy?
Entropy measures unpredictability in bits — each bit doubles the number of possible passwords. Roughly, entropy = length × log2(size of character set). Aim for 75+ bits for important accounts; longer passwords and larger character sets both raise it.
Should I reuse a generated password?
No. Use a unique password for every account so a breach of one service can't be used to break into the others, then store them in a password manager.