Password generator
Pick a length and the kinds of characters you want, and get five random passwords at once. Each one shows its strength, and none of them leaves your browser.
Free, no sign-up. Runs in your browser. Nothing you type or upload is sent to us or stored.
Keep a page for the right people only
On Liite Pro you can protect a page with a password, so a client area, a price list or a guest page is only seen by people you give it to.
How to use it
- Set the length, from 8 to 128 characters. The default of 20 suits most accounts.
- Choose uppercase, lowercase, digits and symbols, and leave out look-alike characters if you'll ever type the password by hand.
- Copy the password you like and save it in your password manager straight away.
How the passwords are made
Each password comes from your browser's cryptographic random generator (crypto.getRandomValues), the same source browsers use for encryption keys. Characters are picked without bias, so no letter or symbol turns up more often than the others. With "at least one of each" on, every password includes at least one character from each kind you chose, which some sign-up forms insist on.
Everything happens on your device. The passwords aren't sent to us, aren't saved and aren't logged. Close the tab and they're gone, so copy the one you want first.
What the strength number means
Above the list you'll see the passwords' entropy in bits and a strength label. Entropy measures how many guesses an attacker would need: every extra bit doubles the work. A password made from all four kinds of characters gets roughly 6.5 bits per character, so 20 characters land well past 120 bits, far beyond what anyone can guess.
The number only holds for random passwords like these. A password you make up yourself, like a name and a year, is much weaker than its length suggests, because people choose in predictable ways and attackers know those patterns.
Length beats complexity
Adding characters raises strength faster than adding symbols. A 20-character password of only letters and digits is stronger than a 10-character one stuffed with symbols, and easier to type on a phone. If a site rejects symbols, turn them off and add a few characters instead.
Leaving out look-alike characters such as 0 and O, or 1, l and I, costs a little strength per character but saves mistakes when you read a password aloud or copy it from paper. Add a couple of characters to make up for it.
Keeping your accounts safe
Use a different password for every site. When one site leaks its passwords, attackers try the same email and password everywhere else, and a reused password opens all of those doors. A password manager remembers them for you, fills them in, and warns you when a site you use has been breached.
Turn on two-factor authentication wherever it's offered, ideally with an authenticator app or a security key rather than text messages. Then even a stolen password isn't enough on its own.
Questions
Is this password generator safe to use?
Yes. The passwords are made in your browser with its cryptographic random generator and are never sent to us or stored anywhere.
How long should my password be?
Twenty characters is a good default for accounts you keep in a password manager. For a password you must type often, go longer with letters and digits rather than shorter with symbols.
Why does it make five passwords?
So you can pick one that a site will accept or that's easier to read, without pressing the button again. They're all equally random.
What does "leave out look-alike characters" do?
It drops characters that are easy to confuse, like 0 and O or 1, l and I. It helps when you'll read or type the password by hand.
Should I write my password down?
Saving it in a password manager is better. If you must write one down, keep it somewhere private and away from the device it opens.