Pick a mode
Random characters for maximum density per keystroke, or a memorable passphrase of EFF short-list words for the few secrets you must type and remember.
Free tools · Passwords
Generate it — don't invent it.
Random characters or memorable passphrases with live entropy ratings, drawn with your browser's secure generator — never stored, never uploaded.
Fresh randomness
Generate it — don't invent it.
Random characters or memorable diceware-style passphrases, drawn with your browser's secure generator. Nothing is stored or uploaded; the secret wipes after ten idle minutes.
Character classes
How it works
Three steps, all on your device.
The same policy math as the strength calculator, pointed forward: see what the rules are worth before you commit to a secret.
Tune the rules
Length and character classes for random mode (lookalikes optional); word count, separator and capitalization for passphrases. The entropy rating updates live.
Take it and clear it
Copy the fresh secret straight into your password manager, regenerate for another, or clear it. Everything wipes after ten idle minutes.
Questions
Generating passwords, answered.
If you manage servers by hand, see the engineering services behind this tools series.
Is my password uploaded or stored anywhere?
No. Generation runs entirely in your browser with crypto.getRandomValues — the page makes no network requests, stores nothing, and wipes the secret after ten idle minutes (sooner if you press Clear). You can verify this in your browser's developer tools or disconnect from the network after the page loads.
Are the passwords truly random?
They come from your browser's audited cryptographic generator (crypto.getRandomValues), drawn without modulo bias, with at least one character from every active class. That is the same quality source password managers use — far stronger than Math.random, which this page never touches.
Random characters or passphrase — which should I use?
Random characters for anything a manager fills in: more entropy per character. Passphrases for the handful you must memorize and type — the master password of your manager, disk encryption, backups. Six EFF short-list words carry about 62 bits: strong, typable, memorable.
Where do the passphrase words come from?
The embedded EFF Short Wordlist #1 (1296 short words, by the Electronic Frontier Foundation, CC BY 3.0 US). It ships with the page, so passphrases generate fully offline. Each word adds about 10.3 bits of entropy.
Does capitalizing words make the passphrase stronger?
No — it is a fixed transform an attacker can guess, so the entropy readout ignores it. Capitalize for readability if you like; add another word if you want more strength.
How is this different from the strength calculator?
That tool grades a password you already have; this one creates fresh secrets with known entropy. Generate here, then paste into the strength calculator if you want the full crack-time table and breach-list check.