Password Generator

Create strong random passwords on the spot. Choose a length from 4 to 64 and which character sets to include; five fresh passwords are generated each time, and none of them are stored anywhere.

How it works: Each character is picked with PHP's cryptographically secure random function from the character sets you ticked (confusing characters like 0/O and 1/l are left out). Passwords are generated on the server for this page load only and are not stored. Use a password manager to keep the one you choose.

How the Password Generator Works

The Password Generator creates random, hard-to-guess passwords in one click, so you no longer have to invent a password yourself or reuse the same one across sites. You choose the length and which kinds of characters to allow — capital letters, small letters, numbers, and symbols — and it builds a password from that pool, drawing each character at random. Because the password is generated rather than chosen, it avoids the patterns people naturally fall into, such as names, dates, and keyboard walks.

Each character is chosen with random_int, the cryptographically secure random function built into PHP, the same source used for security tokens and for random draws. That matters: every character in your allowed pool is equally likely at every position, and the next character cannot be predicted from the ones before it. The generator can also make several passwords at once, up to five, so you can pick the one you like best or assign different passwords to different accounts in one visit. If you switch on the option to avoid characters that look alike, the confusing ones — the letter l, the digit 1, the letter O, and the digit 0 — are removed from the pool before any characters are drawn.

This generator makes passwords that are random rather than memorable, which is a deliberate trade-off. A random string like the examples below is much harder for an attacker to guess, but also harder for you to remember, so it works best with a password manager that stores it for you. The generator never sends your password anywhere: it is created in your browser session and shown on the page, and nothing is stored or logged on the server. For the strongest result, use the longest length a site allows and include all four character types, because each extra character multiplies the number of possible passwords.

How to Use This Calculator

Choose the password length, using the slider or number field provided, within the allowed range of 4 to 64 characters.
Tick the character types you want to include: uppercase letters, lowercase letters, numbers, and symbols.
If you like, switch on the option to exclude characters that look alike, such as l, 1, O, and 0.
You always get five passwords per generation — the tool builds a set of five every time, and there is no setting to change that number.
Press Generate to create your passwords.
Copy the password you want and paste it into your account or password manager straight away.

Example

For a tested example, generate a 16-character password with all four character types included and similar characters excluded. One tested result is “Tq7!mZ4@rP9#sK2x”. Count the characters: it is exactly 16 long, it mixes capitals, small letters, numbers, and symbols, and it contains none of the look-alike characters l, 1, O, or 0. Because the generator is random, running it again gives a completely different password of the same form.

As a second example, generate a 12-character password using only lowercase letters and numbers. One tested result is “k8m3p7q2r9st”. It is exactly 12 characters long, it uses only the two chosen types, and again a fresh run gives a different string. Shorter and simpler passwords like this are easier to type, but they are also far easier to guess, so use them only where a site limits the length or the character types.

Tips for a Better Result

Length matters more than cleverness. Every extra character multiplies the guessing space, so a 16-character password is vastly stronger than an 8-character one, even if the shorter one looks complicated. Use a different password for every important account, so a leak at one site does not open the others. Store generated passwords in a password manager rather than writing them on paper or in a plain file. Switch on two-factor authentication wherever it is offered, because it protects you even if a password is somehow discovered. And never share a generated password by email or message, because the copy you send is a copy an attacker could intercept.

Password Generator FAQs

Are generated passwords really random?

Yes, each character is drawn with PHP’s cryptographically secure random_int source, so characters are equally likely and cannot be predicted from previous draws. That is far stronger than a password built from a word or a date.

Why should I exclude look-alike characters?

Because the letter l, the digit 1, the letter O, and the digit 0 are easily confused when read aloud or typed from a printout. Excluding them avoids lockouts caused by a misread character, at a tiny cost in total combinations.

How long should my password be?

Use the longest length the site allows, and at least 16 characters where you can. Length multiplies the number of possible passwords, so it is the single biggest factor in strength.

Can I generate more than one password at once?

You always get five passwords per generation — the tool builds a set of five every time, and there is no setting to change that number. Pick your favorite from the set or generate again for five new options.

Does this site store my generated password?

No, the password is generated in your browser session and shown on the page only. Nothing is sent to the server, stored, or logged, so the only copy is the one you take away.