Password generator
Make strong, random passwords and passphrases on your own device.
Time to guess at 10 billion guesses a second: longer than the age of the universe
Next: Hash generator · UUID generator
Report a problem with this tool
How to use Password generator
Pick a password or passphrase
A password is a mix of letters, numbers and symbols. A passphrase is a few random words that are easier to type and remember.
Set the options
Choose the length, which kinds of characters to use, or how many words. A new one appears with every change.
Copy and save it
Copy it straight into the sign-up form and your password manager. Click Generate new if you’d like another.
Why use Utils365
Truly random
Every character comes from your browser’s cryptographic random generator, with no bias towards any letter or number.
Made on your device
Passwords are generated in your browser. They’re never sent anywhere, saved or logged.
Honest strength meter
See the entropy in bits and a rough time to guess, worked out from how the password was made.
Fits awkward rules
Ask for at least one of each kind of character, or leave out look-alikes such as l, 1, O and 0.
Frequently asked questions
Is it safe to use an online password generator?
This one is. Passwords are made in your browser with its cryptographic random generator and are never sent over the internet, stored or logged.
How long should a password be?
At least 16 characters for anything important, using upper and lower case letters, numbers and symbols. That gives around 100 bits of entropy, far beyond what anyone can guess. Longer is always better when a site allows it.
Is a passphrase better than a password?
Both are strong if they’re random and long enough. Five random words give 55 bits and six give 66, and they’re much easier to type on a phone or read out. A random 16-character password packs more strength into less space.
Should I use a password manager?
Yes. A password manager remembers a different strong password for every site, so one leak can’t unlock your other accounts. You then only need to remember one strong passphrase for the manager itself.
What does entropy in bits mean?
It measures how many equally likely passwords the settings could produce. Each extra bit doubles the number of guesses needed. Under 50 bits is weak; 70 bits or more is strong against even fast offline attacks.
Why avoid look-alike characters?
Characters such as I, l and 1 or O and 0 are easy to mix up when you read a password aloud or type it from paper. Leaving them out costs a little strength, so add a character or two to make up for it.