Password Generator — Strong, Random, Private

How to use Password Generator

1. Pick a lengthSlide between 6 and 32 characters. 16 is the default and a good choice for most accounts.
2. Choose the charactersUppercase, lowercase, numbers and symbols — tick what the site allows. Exclude ambiguous leaves out l, 1, I, O and 0, which are easy to misread.
3. Generate and copyPress Generate Password, then the copy button. Generate again as many times as you like.

Truly random

The characters are chosen with the browser's cryptographically secure random number generator — the same source used for encryption keys — rather than the predictable kind of randomness that ordinary code uses. The password is created in your browser and is never sent or stored anywhere.

How long is long enough?

Length matters more than cleverness. A random 16-character password of letters and numbers has more combinations than could be tried in any realistic time; 12 is a sensible minimum for anything important. Use a different password for every account, and keep them in a password manager so you don't have to remember them.

Unique matters as much as strong

Most stolen passwords aren't guessed. They leak from one website's database and are then tried on others — email, banking, social accounts. That is why a different password for every account matters as much as a strong one: a random password you reuse is only as safe as the weakest site that stores it.

If a site rejects the password, it usually has a rule about symbols. Untick Symbols, make the password a few characters longer to make up for it, and generate again.

Memorable passwords from your name or a date

Switch to Naam / date se and type any of these: your name, a date or a year, and a favourite character or word — a symbol such as @, or a word such as Tiger. You get suggestions in three levels:

• Easy — your words as you typed them, a separator, the year and one random everyday word, like Rohan@Mango98. Remembered at a glance, but also easy to guess, and labelled that way.
• Hard — one letter swapped for a look-alike and a few random characters, like R0han@98kQ.
• Strong — enough random characters to hold up on their own, whatever an attacker knows about you.

A password made only of a name and a birth year is the first thing an attacker tries — lists of names crossed with every year are a standard part of password cracking. So even Easy never gives the bare name and year, and every suggestion's label counts only its random part, never your name. Use Easy for accounts that don't matter much; for email, banking and UPI, use Strong.

Nothing you type is sent anywhere or saved, and the fields are cleared as soon as you leave the tool.

Questions people ask

Related tools