A random password appears in the box below the moment this page loads. Move the length slider, turn the character sets on or off, then click Generate to roll a new one or Copy to put it on your clipboard.
Password Generator
freetoolonline.com editorial team
The password generator builds a strong random password in your browser: set the length from 4 to 64 characters (16 by default), toggle lowercase, uppercase, digits, and symbols, then copy the result. Nothing is uploaded, saved, or tied to an account.
How it builds a password
Characters are pulled one at a time from the enabled pool using the Web Crypto secure random generator - cryptographically secure values, not the ordinary pseudo-random ones most scripts use. The lowercase, uppercase, and digit sets deliberately skip look-alike characters - no lowercase l or o, no uppercase I or O, and no 0 or 1 - so the password is easier to read off a screen. Symbols come from the set !@#$%^&*-_=+? when you turn them on. Uncheck every set and the generator will not silently produce a weak result - it shows "Select at least one character set" and leaves the output blank until you turn one back on.
Privacy and limits
Generation runs entirely in this browser tab: the password is never sent to a server, written to an analytics service, or stored on the page, and refreshing or leaving clears it with no history. If you copy a password, it goes to your clipboard and nowhere else. The strength label is a math estimate from the length and character sets you chose, not a real-world test - it does not check the password against breach databases or a dictionary of common passwords.
Minimum length for each strength band
The bit count shown next to Generate is the password length multiplied by log2 of the character pool you enabled, and the label switches at fixed thresholds: below 36 bits is Weak, 36 or more is Fair, 60 or more is Strong, and 90 or more is Very strong. The pool size depends on which of the four checkboxes are on - digits alone draw from 8 characters (2 through 9, since 0 and 1 are skipped), lowercase letters alone or uppercase letters alone each draw from 24, and all four sets together draw from 69. A smaller pool needs more characters to reach the same band, shown below for each combination.
| Character sets on | Pool size | Fair (36+ bits) | Strong (60+ bits) | Very strong (90+ bits) |
|---|---|---|---|---|
| Digits only | 8 | 12 | 20 | 30 |
| Lowercase or uppercase only | 24 | 8 | 14 | 20 |
| Lowercase + uppercase | 48 | 7 | 11 | 17 |
| All four sets (default) | 69 | 6 | 10 | 15 |
At the default settings - 16 characters with all four sets on - the 69-character pool works out to about 98 bits, already inside the Very strong band. Switch to digits only and keep the same 16 characters, and the smaller 8-character pool drops the estimate to about 48 bits - Fair, not Very strong - because a smaller pool makes each character less predictable even when the length has not changed. Reaching Very strong on digits alone takes 30 characters instead of 16.
Learn more
Learn the controls in detail with the password generator step-by-step guide, which walks through each option and the choices behind them.
Frequently Asked Questions
Is the password created on my device or on a server?
On your device. Every character is drawn from the browser secure random generator (Web Crypto) inside this tab, and the password is never uploaded. Refreshing or leaving the page clears it, and nothing is saved.
How long can the password be?
The length slider runs from 4 to 64 characters and starts at 16. Move the slider and the password regenerates at the new length right away.
Why are some letters and numbers left out (no 0, 1, l, o, I, O)?
The lowercase, uppercase, and digit sets skip look-alike characters on purpose - lowercase drops l and o, uppercase drops I and O, and digits drop 0 and 1 - so the password is easier to read off a screen and type without mixing them up.
What does the strength label mean?
It is an estimate from the password length and how many characters are in the pool you enabled, shown as a label (Weak, Fair, Strong, Very strong) plus an approximate bit count. It is a math estimate, not a check against breach lists or a real crack test.
Can I turn symbols on or off?
Yes. Four checkboxes let you include or drop lowercase letters, uppercase letters, digits, and symbols independently. If you uncheck every set, the tool asks you to pick at least one instead of producing an empty password.