Strong password generator
Generate strong, random passwords with uppercase, lowercase, numbers and symbols. At least one character from every set is guaranteed. Free, unlimited, and generated in your browser with the Web Crypto API.
About strong passwords
mixed case, numbers, symbols
A 16-character password with all four character sets has roughly 100 bits of entropy. That means an attacker trying every possibility would need to check 2^100 guesses — computationally infeasible with current technology. The generator uses crypto.getRandomValues with rejection sampling so every password is truly random with no bias.
Why "Use every chosen set"
Enabling this option guarantees at least one character from each selected set appears in the password. Many online services enforce this rule, and enabling it ensures your generated passwords will pass those validation checks on the first try.
Every password is generated locally using the Web Crypto API. Nothing is uploaded, logged, or transmitted. The page works entirely offline after the first load.
FAQ
about strong password generation
What makes a password strong?
A strong password is long, random, and uses multiple character types. 16 characters with mixed case, digits, and symbols provides ~100 bits of entropy. This generator ensures at least one character from every chosen set.
How long should a strong password be?
16 characters is the practical minimum for strong passwords today. For high-value accounts, use 20-32 characters. This generator supports up to 64 characters.
What character sets should I use?
All four: uppercase (A-Z), lowercase (a-z), digits (0-9), and symbols. Enable 'Use every chosen set' to guarantee at least one of each.
Are these passwords safe to use?
Yes. They use crypto.getRandomValues with rejection sampling, the same cryptographic source browsers use for TLS. No server ever sees the password.
More PassForge generators
pick a variant
Questions or feedback?
a reply within 2 business days