Password Generator

Strong, random passwords — created on your device, never on a server.

…
Strength ·

At least one character set must stay selected.

Generated locally in your browser with cryptographic randomness (Web Crypto API). Nothing is sent to a server — Dusrel never sees your passwords.

A strong password is your first line of defence online. This generator creates truly random passwords using the Web Crypto API — the same cryptographic randomness your browser uses for secure connections — so every password is unpredictable and unique.

Aim for at least 16 characters with a mix of uppercase, lowercase, numbers and symbols: that combination carries over 100 bits of entropy, which would take an enormous amount of computing power to crack by brute force. Use a different password for every account, and store them in a password manager.

How to create a strong password

  1. 1

    Set the length

    16 characters is a strong default. Longer is always better — use 20 or more for important accounts like email and banking.

  2. 2

    Pick the character types

    Keep all four types on for maximum strength. If a website rejects symbols, turn symbols off instead of shortening the password.

  3. 3

    Exclude look-alikes if you type by hand

    The "exclude look-alikes" option removes 0, O, 1, l and I — handy when a password must be read aloud or typed manually.

  4. 4

    Copy it into your password manager

    Generated passwords are not saved anywhere. Copy the one you like and store it in your password manager right away.

Frequently asked questions

Is this password generator safe to use?

Yes. Passwords are generated locally in your browser with crypto.getRandomValues, a cryptographically secure random source. Nothing is sent to or stored on any server.

What makes a password strong?

Length and randomness. A random 16-character password using all character types has over 100 bits of entropy — far stronger than a short "complex" password or anything a human invents, which attackers can often guess from patterns.

Can I reuse one strong password everywhere?

No. If one website leaks it, attackers replay it on other sites ("credential stuffing"). Use a unique generated password for every account.

Does Dusrel store the passwords I generate?

Never. Generation happens entirely on your device; when you refresh or close the page, the password is gone. That is why copying it into a password manager matters.

More free tools