Password Generator with Custom Length and Symbols
Between 4 and 128 characters
Enter a whole number between 4 and 128.
No character left with these settings: remove some exclusions.
These are characters that are easy to mix up by eye: zero and the letter O, the digit 1, lowercase l, uppercase I and the vertical bar. Useful if you have to retype or read the password aloud.
No character left with these settings: remove some exclusions.
Advanced options
Used with "Letters, digits and symbols". Remove the ones a site rejects.
No character left with these settings: remove some exclusions.
Optional. These characters are never used.
No character left with these settings: remove some exclusions.
The result will appear here.
The password is picked at random in your browser. The bits are an estimate of its strength, for guidance only.
About
This generator builds a random password to your specifications. Set the length anywhere from 4 to 128 characters, decide which character groups to draw from (letters, digits, symbols), and trim the symbol list when a website rejects some of them, or ban a few specific characters. A separate switch drops look-alike characters such as zero and the letter O, which helps when you have to type the password by hand. Whenever several groups are enabled, the result contains at least one character from each, as many sign-up forms demand. A strength estimate in bits is shown beside it. The draw uses your browser's cryptographic randomness: nothing is sent or stored, and the page keeps working offline once installed.
How to use it
- Set the length: the longer the password, the harder it is to guess.
- Pick the characters to use, then adjust the allowed symbol list or the characters to exclude.
- Turn on the look-alike filter if you will have to type the password manually.
- Copy the result with its button, or press "Generate another password" for a new one.
Frequently asked questions
How long should a password be?
As long as the site allows: every extra character multiplies the number of possible passwords. The tool warns about anything under 12 characters and goes up to 128 when a site accepts that.
A website rejects some symbols. What now?
Edit the "Allowed symbols" field to keep only the ones the site accepts, or empty it to get letters and digits only. The "Characters to exclude" field also lets you rule out a few specific characters.
Is the password sent or saved anywhere?
No. It is picked at random in your browser using its cryptographic generator, shown on screen and never transmitted or stored. Save it in a password manager so you do not lose it.
What does the number of bits mean?
It is an estimate: the length times the base-2 logarithm of the alphabet size. It assumes a truly random draw and is only indicative, because it ignores the protections each website applies on its side.
Why does every password include an uppercase letter, a digit and a symbol?
When those groups are enabled, the tool places one character from each before filling the rest at random. That avoids rejection by sites enforcing such rules, at the cost of a very slight drop in true entropy.