Strong Passwords, Instantly
Cryptographically secure random passwords, memorable passphrases and PINs — generated offline in your browser with a live entropy meter, bulk mode and a built-in QR scanner.
PINs are short by nature — use them only to unlock devices, never to protect important accounts.
Tap Generate to create a secure password
Strength—
Entropy: — bitsEst. crack time: —
Generated passwords appear here for quick re-copy. Cleared when you leave the page.
- Use a unique password for every account — reuse turns one leak into many.
- Store passwords in a reputable password manager instead of notes or browsers you don't control.
- Turn on two-factor authentication everywhere; a password alone is never enough.
- Never use names, birthdays or keyboard patterns (qwerty) in real passwords.
QR CODE READER
Position the QR code inside the frame
Scan a QR code or upload an image to see the result
Frequently Asked Questions
How strong is a password from this generator?
The tool uses your browser's cryptographically secure random number generator (crypto.getRandomValues). A 16-character password with upper and lower case letters, digits and symbols has roughly 100 bits of entropy — far beyond what brute-force attacks can reach.
Is any password sent to a server?
No. Generation happens entirely inside your browser using JavaScript. Nothing is transmitted, logged or stored — passwords only leave the page when you copy them yourself.
What is a passphrase and when should I use one?
A passphrase joins several random words, like river-coffee-mountain. It is much easier to remember and type than random symbols while staying very hard to crack — ideal for your main password manager master password.
What does the entropy number mean?
Entropy measures unpredictability in bits. Each bit doubles the number of possible passwords. Under 40 bits is weak, 60–80 bits is strong, and 100+ bits is excellent for anything important.
Can I scan a QR code with this tool?
Yes. Open the QR Reader tab and either use your camera or upload a QR image. The decoded text can be copied, regenerated as a new QR image, or opened directly if it is a link.