New accounts
Give every site its own long, random password.
Strong Password Generator
Make a unique strong password for every account. It is created on your device and goes nowhere else.
Your files stay with you. Your files never leave your browser. This tool runs on your device: nothing is uploaded to our servers, so there is nothing for us to store or see.
How to use it
- Set the length and the kinds of characters.
- Press New password until you like it, and check the strength meter.
- Copy it straight into your password manager.
Where it helps
Wi-Fi and devices
Set a strong router or Wi-Fi password, avoiding look-alikes.
Team accounts
Create a shared password to store in your team's password manager.
Good to know
Stays in your browser
Your text and files are processed on your device and never sent to our servers.
Use a password manager
Don't memorise; store each password safely.
Turn on two-factor
A strong password plus a second step is far safer.
Questions people ask
How do you create a strong random password?
Set the length, from 8 to 64 characters, and tick the kinds of characters: uppercase, lowercase, numbers and symbols. Optionally leave out look-alikes such as I, l, 1, O and 0. Press New password until you like it, check the strength meter and copy it straight into your password manager. It's created on your device and goes nowhere else.
- 8-64 Characters. 16 by default.
- Bits Strength meter. 80+ is strong.
- Crypto Secure random. No bias.
- 0 Sent or saved. Made in your browser.
Is a password from a website safe to use?
It's safe here because the password is created inside your browser and is never sent to us or saved. You can even disconnect from the internet after the page loads and it still works, which proves nothing is being fetched or sent. Copy it straight into your password manager.
How long should my password be?
At least 14 characters with a mix of types for important accounts such as email and banking. Length matters most: each extra character multiplies the guesses needed. The meter shows the strength in bits; above about 80 bits is strong. The default of 16 characters is a good starting point.
What does the look-alike option do?
It leaves out characters that are easy to confuse when reading or typing, such as I, l, 1, O, 0 and o. That's useful for Wi-Fi passwords you read out to guests, or passwords you might type from a printed note. It slightly reduces strength, so add a character or two.
How do I remember it?
You shouldn't have to. Save it in a password manager, such as the one built into your browser or phone or a dedicated app, and use a different password for each site. Then you only need to remember one strong master password, and the manager fills in the rest for you.
How is it random?
Characters are chosen with the browser's cryptographic random generator, with no bias towards some characters, and at least one character of each type you ticked is guaranteed. If the browser can't provide secure randomness, the tool says so instead of making a weak password. No pattern can be predicted.
What does the strength meter measure?
It estimates entropy in bits from the length and the set of characters you allowed. Each extra bit doubles the number of guesses an attacker would need. Around 60 bits is fair, above 80 is strong and 100 or more is very strong, for a password generated randomly like this.
Should I include symbols?
Yes, where the site allows them, because they enlarge the pool of characters. If a site rejects certain symbols, untick symbols and add a few characters of length instead, which keeps the password just as strong. Length usually matters more than including every type. Try both and watch the meter.
Is it better than a password I make up?
Almost always. People choose patterns, names, dates and words that attackers try first, such as a pet's name plus the year. A randomly generated password has no pattern to guess. Your made-up passwords may feel strong but often appear in leaked password lists. Let the generator do it.
Should I change passwords regularly?
Current advice is to change a password when there's a reason, such as a breach or a shared password when someone leaves, rather than on a fixed schedule. Forced frequent changes lead to weaker patterns. A unique, strong password per site with two-factor login matters most.
What about two-factor authentication?
Turn it on wherever you can, especially for email, banking, WhatsApp and business tools. A second step, such as an authenticator app code, stops someone who has your password from signing in. Even a strong password can leak in a breach that's not your fault.
Can I use it for my business team?
Yes, for shared accounts that must have one password, such as a social media page. Store it in a team password manager rather than a WhatsApp group or spreadsheet, and change it when someone leaves. Where possible, give each person their own login instead. That keeps access easy to remove.
What is a passphrase?
A passphrase is several random words joined together, such as four or five unrelated words. It can be easier to type and remember than random characters while still being strong if the words are truly random. This tool makes character passwords, which are best kept in a password manager.
Is the password stored anywhere?
No. It exists only in your browser tab until you copy it. Nothing is saved, logged or sent to our servers, and pressing New password replaces it. Close the tab once you've saved it in your password manager, especially on a shared computer. Nobody else ever sees it.
Does it work on a phone?
Yes. Set the length with the slider, tick the character types and copy the password with a tap. It's handy when creating an account in a mobile app. Most phones also have a built-in password manager that can save it straight away for you. Use it on any device.
Is the password generator free?
Yes. It's free with no sign-up and no limit on use. It's one of the free developer tools from Marketiism, along with the hash and UUID generators. Marketiism builds software for small businesses, with secure sign-in and separate logins for each team member. Use it as often as you need.
Want this inside your own account?
Marketiism keeps your invoice numbers, GST reports, UPI payment links and WhatsApp reminders in one place. Leave your details and we'll call to set it up for your business, or start the trial yourself.
More Developer tools
Hash Generator
Get MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or a file.
UUID Generator
Generate random UUID v4 values in bulk, in several formats.
Base64 Encode and Decode
Encode text to Base64 or decode Base64 back to text, with URL-safe mode.
JSON Formatter
Format, validate and minify JSON, and see exactly which line has a mistake.
JSON to CSV
Turn a JSON list of records into CSV for Excel or Google Sheets.
CSV to JSON
Convert CSV rows into a JSON list, with numbers and true/false detected.