QR Code Generator
Generate a QR code for any link or text and download it as a PNG or SVG.
Create strong random passwords in your browser.
Strength will appear here.
Passwords are created in your browser and are never stored, logged or sent anywhere. Paste the one you want straight into a password manager.
Password Generator builds random passwords using the browser's cryptographic random number generator, the same source used for security-sensitive work in web applications. That matters, because the ordinary random function found in most scripts produces predictable sequences and should never be used for anything protecting an account.
You control the length and which character sets are included: lowercase, uppercase, digits and symbols. An option to exclude lookalike characters removes the pairs that cause trouble when a password has to be read aloud or typed from a screenshot, such as capital O and zero, or lowercase l and the digit one.
A strength estimate is shown as entropy in bits, which is a better guide than a coloured bar alone. Entropy measures how many guesses an attacker would need on average; adding length raises it faster than adding exotic characters. Nothing generated here is stored, logged or transmitted, and the password is gone as soon as you close the tab.
The password generator is used by writers, developers, students, marketers and anyone else who needs the job done once without installing software. Common cases include:
No. Generation happens entirely in your browser tab. Nothing is written to local storage, nothing is logged and nothing is sent over the network. Closing the tab destroys the password permanently.
Longer matters more than more complicated. Sixteen characters from a mixed set is a reasonable minimum for an account that matters, and twenty or more is better for email and banking, which attackers target first.
It is a measure of unpredictability. Each extra bit doubles the number of guesses needed. Roughly speaking, under 50 bits is weak, 70 to 80 bits is solid for most accounts, and above 100 bits is beyond brute force with any foreseeable hardware.
Only if the site refuses them, which some still do. Symbols add meaningful entropy per character. If you have to drop them, compensate by making the password longer.
Because capital O and zero, or lowercase l and the digit one, are easy to confuse when a password is read aloud, written down or typed from a screen. Excluding them costs a little entropy and saves a lot of frustration.
In a password manager. Reusing passwords across sites is the single biggest practical risk, and a manager removes the need to remember or reuse anything.
If the password generator is not quite what you need, these other free tools solve closely related problems.
Generate a QR code for any link or text and download it as a PNG or SVG.
Encode any text, including emoji and accents, to a Base64 string.
The current epoch time in seconds and milliseconds, updating every second.
Tidy messy pasted text: extra spaces, empty lines, breaks and special characters.
Pretty-print and validate JSON, with the exact line and column of any error.