Password Generator
Create strong, random passwords using cryptographically-secure randomness, with live entropy scoring and bulk generation. Everything runs locally — passwords never leave your browser.
Your password
Press generate…
Options
Bulk generate
Same settingsFrequently asked questions
Is this generator safe?
Yes. It uses the Web Crypto API (crypto.getRandomValues) for cryptographically-secure randomness, with rejection sampling to avoid modulo bias. It runs entirely in your browser — passwords are never transmitted or stored.
How long should my password be?
Aim for at least 80 bits of entropy for high-value accounts. With a mixed character set (~70 symbols), that is roughly 13+ characters; 16–20 characters is a comfortable, future-proof default against offline cracking.
Where are passwords stored?
Nowhere. Each password exists only in your current tab. Closing or refreshing clears it. Store generated passwords in a reputable password manager.
Related tools
About this tool
This free online tool runs entirely in your browser. Your data never leaves your device — there is no server processing, no tracking, and no signup required. Use it as often as you need, on any device.
· Maintained by the Forge Engineering Team
How This Calculator Works
This tool generates passwords using a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG) via the browser's crypto.getRandomValues() API, not Math.random() which is not cryptographically secure. The approach aligns with NIST SP 800-63B guidelines, which prioritize password length over complexity. Entropy is calculated as log₂(charset_size^length) bits. All generation is client-side — passwords are never transmitted or stored.
Frequently Asked Questions
How long should my password be?
NIST SP 800-63B recommends a minimum of 8 characters but suggests longer is better. A 16-character password using a full character set (94 symbols) provides about 105 bits of entropy — virtually uncrackable by brute force. Length matters more than special characters.
Is it safe to use an online password generator?
This tool generates passwords entirely in your browser using crypto.getRandomValues() — no data is sent to any server. However, avoid generators that process passwords server-side. For maximum security, use a reputable password manager (Bitwarden, 1Password) with built-in generation.
Should I use a password or a passphrase?
Passphrases (4–6 random words like 'correct-horse-battery-staple') are easier to remember and equally secure. A 4-word passphrase from a 7,776-word dictionary provides about 51 bits of entropy. NIST now recommends passphrases over complex passwords.
Sources & References
Explore more free tools
All calculators are free, private, and work instantly — no signup, no data collection.