Your password
Strength
Made in this tab by your browser's own random number generator. Nothing is sent, saved, or logged. How this works
The generator needs JavaScript, which runs only here in your browser. Turn it on for this site to use it.
Strength
Every character comes from crypto.getRandomValues(), the random number generator your browser draws from the operating system. Each password of this length made from these characters is equally likely, and every kind you tick appears at least once. The strength counts them: every added bit doubles how many guesses it would take to try them all.
The length defaults to 15, the minimum that NIST, the US standards body, sets for a password guarding an account on its own (SP 800-63B-4 (opens in a new tab), 2025). Go shorter, down to 8, only where the account also asks for a second factor, such as a code from an app.
Spell it out lists the password one character to a line, in words to read aloud just as written: each letter with its case and NATO code word, each digit as a number, and each symbol by name.
Nothing leaves this tab. After it loads, the page makes no network requests, stores nothing, and forgets the password when you leave. Check for yourself: watch your browser's Network tab, or turn off Wi-Fi and press New password.
Once you copy a password, your clipboard and any clipboard history keep it, as they would any text. Extensions, a managed computer, and browser features you turn on yourself, such as read-aloud or translation, can see what any page shows.