UUID Generator
Get a new random UUID the moment the page opens, or generate up to 1,000 at once. Choose version 4 (fully random) or version 7 (time-ordered, ideal for database keys), uppercase or lowercase, with or without hyphens.
Password Generator
A strong random password is ready the moment the page opens: 16 characters from letters, digits and symbols, about 103 bits of entropy. Change the length and character sets and a new password is generated instantly, with a meter that shows its strength.
The preview is shortened. Copy and Download include the whole result.
Your text never leaves your device.
How to use
- Set the length (4–128) and choose the character sets: lowercase, uppercase, digits, symbols. Turn on No look-alikes if the password will be typed by hand.
- Check the strength meter: aim for 80 bits or more.
- Copy the password straight into your password manager or the sign-up form. Press Generate for a different one.
Examples
- Before
- Length 16, all character sets
- After
- 1_wk6Zf0.K@3eCy^ (103 bits: strong)
- Before
- Length 12, letters and digits
- After
- XzsjLb6ZGXmA (71 bits: fair)
- Before
- Length 20, all sets, no look-alikes
- After
- %M>c4y!HsNMbKd%*Dhv7 (127 bits: strong)
- Before
- Length 8, lowercase and digits
- After
- yw9unvxj (41 bits: weak)
How strength is calculated
The meter shows entropy, the strength of the password against an attacker who knows exactly how it was generated:
| Character sets | Pool | Bits per character | 16 characters |
|---|---|---|---|
| lowercase and digits | 36 | 5.2 | 82 |
| letters and digits | 62 | 5.95 | 95 |
| letters, digits, symbols | 90 | 6.49 | 103 |
The symbols are the 28 characters ! # $ % & ( ) * + , - . / : ; < = > ? @ [ ] ^ _ { | } ~. Quotes, backslash and backtick are left out because some forms and shells handle them badly.
Entropy assumes the password is random, which only a generator can guarantee. A human-made password like “Summer2026!” has the same character types but is among the first guesses of every cracking tool.
Using generated passwords well
- Use a password manager. It stores a different random password for every site, so you only remember one. Generate here, paste into the manager.
- Never reuse a password. Breached passwords are tried on other sites automatically within hours.
- Turn on two-factor authentication for email, banking and anything else that matters. A strong password does not help against phishing; a second factor often does.
Common mistakes
- Choosing short and complex over long. An 8-character password with symbols is weaker than a 16-character password of letters and digits.
- Editing the generated password to make it memorable. Changing it back towards a word throws away most of its strength.
- Sending passwords by email or chat. Use your password manager’s sharing feature, or say it over a separate channel.
Frequently asked questions
How long should a password be?
At least 16 characters for accounts you care about, and longer is better. Length adds strength faster than complexity: 16 characters from letters and digits give 95 bits, while 10 characters from every set including symbols give only 64. Current NIST guidance (SP 800-63B) also favors length over forced symbol rules.
What does entropy in bits mean?
Entropy measures how many passwords the generator could have produced with your settings: length × log2(number of possible characters). Every extra bit doubles the guesses an attacker needs. Under 50 bits is weak, 50–79 is fair, and 80 or more is strong enough to resist offline cracking with current hardware.
Is this password generator safe?
The password is made in your browser with crypto.getRandomValues, the operating system's cryptographic random source, and is never sent over the network, stored on a server or logged. Every character is drawn without bias: no character or position is more likely than another.
What are look-alike characters?
Characters that are easy to confuse when read or typed: capital I, lowercase l, the digit 1 and the vertical bar, and capital O, lowercase o and the digit 0. Leaving them out costs a little strength, about 6.4 instead of 6.5 bits per character with all sets on, and prevents typos when the password is read from paper or a screen.
Does every password include each selected character type?
Yes. Many sites require at least one digit or symbol, so a password missing a selected set is discarded and a new one is drawn. Discarding keeps all valid passwords equally likely, unlike generators that force a digit into a fixed position.