Password Strength CheckerCheck how strong a password is and why.
Password Generator
Passwords are created on your device with the Web Crypto random generator, using unbiased sampling so every character is equally likely. Choose the length and character types; the estimated strength (entropy) is shown for each setting. Store the result in a password manager.
0Entropy (bits)
0Character pool
0Strength
Runs entirely in your browser. Your input and files are not uploaded to any server.
How to use
- Choose a length — 16 or more characters is a good default.
- Pick the character types the site accepts.
- Copy a password into your password manager. Generate again for a new one.
Examples
Website account
20 characters, all character types ≈ 131 bits of entropy.
Wi-Fi password
24 characters without symbols or look-alike characters, easy to type on a TV.
Privacy
Runs entirely in your browser. Your input and files are not uploaded to any server. See the privacy policy for what is stored in your browser (favorites and history only). Privacy policy
Check it yourself: open your browser’s developer tools, select the Network tab and use the tool. Your file never appears in an upload request. Once this page is saved for offline use, you can also disconnect from the internet and keep working. Ads and anonymous visit statistics, when enabled, make their own requests, but they never receive your files or text.
Frequently asked questions
Are these passwords sent anywhere?
No. They are generated in this page with crypto.getRandomValues and are not stored, logged or transmitted.
What does “exclude look-alike characters” do?
It removes characters that are easy to confuse when reading or typing, such as I, l, 1, O and 0.
How long should a password be?
For accounts protected by a password manager, 16–20 random characters is plenty. Longer is fine if the site allows it.
Related tools
All Security & PrivacyText Encrypt / DecryptEncrypt a private note with a password using AES-256-GCM and PBKDF2, then decrypt it later on this page.
UUID GeneratorGenerate random UUID v4 or time-ordered UUID v7 identifiers in bulk using your browser’s secure random generator.
Hash Generator (SHA)Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes and HMAC signatures of text using the browser’s Web Crypto API.
EXIF Viewer & Metadata RemoverView EXIF metadata in JPG photos — camera, date, GPS location — and download a clean copy with metadata removed.
JWT DecoderDecode a JSON Web Token to read its header and payload, with expiry and issued-at times in readable form.