Password Generator
Create a hard-to-guess password from a length and character types, or as an easy-to-remember word combination (passphrase). The result never leaves this page.
Strength comes from the word count — each word is worth about 10 bits. For things you must memorize, such as a master password or device lock, use 6 or more words. Use Korean words only where Hangul is accepted (many sites allow only Latin letters and digits). The English list is the EFF Short Wordlist #2 by the Electronic Frontier Foundation, CC BY 3.0 US.
Random values come only from the browser's cryptographic generator (Web Crypto). Nothing is sent or stored, and it disappears when you reload.
Generated passwords
Estimated strength: ( bits)
How it works
One character from each selected type is drawn first so every type is included, the rest are drawn from the full set, and the result is shuffled. Taking a random number modulo the set size would favor the first characters slightly, so values that would cause that bias are discarded and redrawn (rejection sampling).
How is a word combination different?
A passphrase such as "bagpipe-bamboo-cactus-lantern-pebble-tiger" strings together words picked at random from a list. It is weaker than random characters of the same length but far easier to remember, so the same strength is easier to keep in your head. Words are drawn with repetition allowed, so the strength is exactly log₂(list size) × word count. If you pick the words yourself or use lyrics or proverbs, that math no longer holds — always use the words the tool drew, unchanged.
Using it safely
Longer is stronger — going to 16+ characters helps more than adding symbols. Use a different password for every site and keep them in a password manager. Do not paste generated passwords into chat apps or notepads.
FAQ
Is the generated password stored on a server?
No. Everything happens in your browser and nothing is transmitted.
How is this different from Math.random?
Math.random is not meant for cryptography and its output can be predicted. This tool uses only Web Crypto, which draws on operating-system randomness.
What do the "bits" mean?
The number of possible combinations expressed as a power of two. Each extra bit doubles the guesses needed. 80+ bits is plenty for most uses.
A site rejects some symbols.
Edit the "Symbols to use" field to keep only the allowed ones, or turn symbols off and increase the length.
Is a word-combination password safe?
Yes, if it has enough words: 6 words is about 62 bits and 8 words about 83. Do not swap or choose the words yourself, though — that breaks the math. Use them exactly as drawn.