Password Generator
Create strong random passwords or easy-to-type passphrases. Choose the length and characters, make several at once and see how many bits of entropy each one has.
SETTINGS
Entropy129 bitsVery strong
For a password generated with these settings. Each extra bit doubles the guesses an attacker needs.
OUTPUT
Passwords are generated in your browser with its secure random generator. Nothing is sent or stored.
How to generate a password
Password or passphrase
A password mixes letters, digits and symbols. A passphrase strings random words together, which is easier to type and remember.
Set the rules
Pick a length from 8 to 128 characters and the character sets. Leave out look-alike characters if the password will be read aloud or typed from paper.
Copy or download
Make one or up to 100 at once, then copy them or download a text file. Generate again for a fresh set.
What makes a password strong
Length and randomness, not clever substitutions. Every extra random character multiplies the number of possible passwords, and the entropy figure shows this in bits: each added bit doubles the guesses an attacker needs. A 16-character password using all four character sets has about 103 bits, far beyond what anyone can try.
How the randomness works
Every character and word is picked with your browser's cryptographically secure random number generator (crypto.getRandomValues). Numbers are drawn by rejection sampling, so each character is exactly as likely as any other. When every selected set is required, passwords that miss one are thrown away and drawn again, which keeps the choice uniform.
Frequently asked questions
Are the passwords sent anywhere or saved?
No. They are generated in your browser and exist only on this page until you copy them. Nothing is sent to Deskbox or stored, and reloading the page clears them.
Where do the passphrase words come from?
From the EFF Short Wordlist 1 by the Electronic Frontier Foundation, used under the Creative Commons Attribution 3.0 US licence (CC BY 3.0 US). It has 1,296 short, distinct words, so each word adds about 10.3 bits of entropy. The words are used unchanged.
Why leave out look-alike characters?
Characters such as I, l, 1, O and 0 are easy to confuse when a password is read aloud, printed or typed by hand. Leaving them out makes the alphabet slightly smaller, and the entropy figure takes that into account.