Use this free online password generator to create strong, random passwords for your accounts. Choose the length and pick which character types to include - lowercase, uppercase, numbers, and symbols - to build a password that fits any site's requirements.
How to Use the Password Generator
Drag the "Password Length" slider to choose how many characters you need.
Check or uncheck Lowercase, Uppercase, Numbers, and Symbols to control which character types are used.
Optionally enable "Exclude Ambiguous Characters" or "Exclude Brackets" for easier-to-read passwords.
Optionally enable "No Repeated Characters" if you don't want any character used twice.
Click "Generate Password" to create your new password.
How the Password Is Built
The generator first builds a pool from the character types you tick: 26 lowercase letters, 26 uppercase letters, 10 digits and 24 symbols, which is 86 characters when everything is selected. Ambiguous characters (i, l, 1, L, o, 0, O and |) and brackets are then removed from the pool if you ask for that.
Each position in the password is then filled by drawing one character from the pool using the browser's cryptographic random number generator (the Web Crypto API), the same source browsers use for security keys. The password is created on your device and is not sent to or stored on any server. It disappears when you leave or refresh the page, so copy it into your password manager straight away.
How Strong Is the Result?
Strength is measured in bits of entropy: the number of guesses an attacker would need is about 2 raised to that number. For a random password it equals length ร log2(pool size). Each extra character multiplies the number of possible passwords by the pool size, so length matters more than adding one more character type.
Length
All four types (86 chars)
Letters and digits (62)
Digits only (10)
8
about 51 bits
about 48 bits
about 27 bits
12
about 77 bits
about 71 bits
about 40 bits
16
about 103 bits
about 95 bits
about 53 bits
20
about 128 bits
about 119 bits
about 66 bits
{{ 'passwordgenerator.guide.strengthNote' | translate: 'As a rough guide, aim for at least 12 characters with all types for everyday accounts and 16 or more for email, banking and your password manager's master password, since those protect everything else. "No Repeated Characters" and the exclusion options make the pool or the choices slightly smaller, which lowers the entropy a little; adding one or two characters more than makes up for it.' }}
Using Generated Passwords Safely
Use a different password for every account. If one website is breached, attackers try the same email and password on banking, email and shopping sites.
Store passwords in a reputable password manager rather than a notes app, a spreadsheet or a WhatsApp message to yourself.
Turn on two-factor authentication wherever it is offered. Never share an OTP, UPI PIN or password with anyone who calls or messages you, even if they claim to be from your bank.
Some sites insist on at least one digit or symbol. Each character is chosen independently, so a short password can occasionally miss a type; generate again if a site rejects it.
If a site rejects certain symbols, tick "Exclude Brackets" or untick symbols and add two or three characters of length instead.
Frequently Asked Questions
Each character is picked independently from the pool built from your selected options, using the browser's cryptographic random number generator. The result is different every time you click Generate Password, and no pattern from one password carries over to the next.
Ambiguous characters like i, l, 1, L, o, 0, O, and | can be easily confused with each other, especially in certain fonts. Excluding them makes passwords easier to read and type accurately.
No. The password is generated by JavaScript running in your browser and is only shown on your screen. Nothing is sent to a server or kept after you leave the page.
Use at least 12 characters with all character types for ordinary accounts, and 16 or more for important accounts such as email, net banking and your password manager. Longer random passwords are far harder to crack than shorter ones with more symbols.
Without repeats, the password cannot be longer than the number of different characters in the pool. For example, digits alone give only 10 characters, so a 12-character digits-only password without repeats is impossible. Add more character types or allow repeats.