Strong password generator
Make a password nobody can guess: random characters for a password manager, or a passphrase of real words you can actually remember and type.
To create a strong password, use the generator above: 20 random characters, or a passphrase of 5 or more random words. It uses your device's secure random number generator, and the password is never sent anywhere. Use a different password for every account.
How to use it
- Choose Random characters for passwords you'll store in a password manager, or Passphrase for ones you need to remember.
- Set the length. 16 to 20 characters, or 5 to 6 words, is strong for almost everything.
- Tap Copy, paste it into the sign-up form, and save it in your password manager.
What makes a password strong
Strength comes from randomness, not from clever tricks. "P@ssw0rd2024" looks complex but is one of the first guesses attackers try, because people make the same substitutions. A password picked truly at random from a large set can't be guessed that way. The strength line under the password shows how many bits of randomness it has: every extra bit doubles the number of guesses needed.
| Password | Randomness | Verdict |
|---|---|---|
| 8 random letters and digits | about 48 bits | Weak against offline cracking |
| 4 random words | about 52 bits | Fair |
| 5 random words | about 65 bits | Good for most accounts |
| 16 random characters (all types) | about 100 bits | Very strong |
| 20 random characters (all types) | about 130 bits | Very strong |
Why passphrases work
Passphrases like velvet-orbit-canyon-plural-sprout are picked at random from the EFF's list of 7,776 words, so each word adds almost 13 bits. They're far easier to type on a phone and remember than random symbols, which makes them ideal for the few passwords you can't keep in a manager: your phone, your computer and the password manager itself.
Keep them locked, offline
Sealcloak encrypts your photos, videos and files on your phone. No account, no cloud, no internet permission.
Private by design
Passwords are generated inside this browser tab with crypto.getRandomValues, the same secure random source browsers use for encryption, and every character is equally likely. Nothing you generate is sent, logged or stored. Close the tab and it's gone.
The same idea runs through Sealcloak: its 9-word recovery phrase is a random passphrase made on your phone, and your vault is encrypted with AES-256-GCM from a key only you hold.
Good password habits
- One password per account, so a leak from one site can't unlock the others.
- Turn on two-step verification wherever it's offered.
- Store passwords in a password manager, not in your photos, notes or chat history.
- Change a password straight away if a site tells you it was breached.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are created in your browser with its secure random generator and never sent anywhere or stored. You can disconnect from the internet after the page loads and it still works.
How long should my password be?
At least 16 random characters for accounts stored in a password manager, or a passphrase of 5 to 6 random words for passwords you need to remember.
Are passphrases as secure as random characters?
A passphrase of 6 random words has about 78 bits of randomness, which is very strong, and it's much easier to type. What matters is that the words are chosen at random, not by you.
Should I write my password down?
Keep it in a password manager rather than in a note or a screenshot. A photo of your passwords sitting in the gallery is one of the easiest things for someone to find.
Encrypt file with password: AES-256, free and private
Lock any file with a password using AES-256-GCM, on your device.
WiFi QR code generator: share Wi-Fi without the password
One scan connects guests to your Wi-Fi. The password stays on your device.
Blur face in photo: blur or pixelate, free and private
Blur or pixelate faces, plates and details before sharing.