Super Boring Tools

Search tools

Find a tool by name or what it does.

Password Generator

Create strong random passwords or memorable passphrases, with control over length, characters, word count, and bulk output.

Password

Very strong ~103 bits

Generated on your device. Nothing is sent or stored.

Type

Characters

Every password includes at least one character from each enabled set. Look-alikes are 0, O, 1, l, I and the vertical bar.

Amount

How to generate a strong password online

  1. Get a password instantly

    A 16 character password using uppercase, lowercase, digits, and symbols appears as soon as the page loads.

  2. Pick password or passphrase

    Stay on Random characters for a classic password, or choose Passphrase for a memorable set of real words joined by a separator, like correct-horse-battery-staple.

  3. Refine the details

    Set length and character sets for a password, or word count, separator, capitalization, and an optional number for a passphrase; the result rerolls with every change.

  4. Copy the result

    Copy a single result with one click, or switch the amount to 5 or 20 and copy the batch individually or all at once.

Why use this tool

Passwords or passphrases

Switch between a classic random password and a memorable passphrase like correct-horse-battery-staple, built from a large list of common words.

Passphrase controls

Set the word count from 3 to 10, choose a hyphen, underscore, period, or space separator, capitalize each word, and add a number.

Entropy-based strength meter

The readout shows estimated bits of entropy for the current settings and rates the result from Weak to Very strong.

Every enabled set represented

Each password contains at least one character from every set you enable, so it passes forms that demand a digit or a symbol.

Look-alike exclusion

One toggle removes 0, O, 1, l, I and the vertical bar for passwords that have to be read aloud or typed by hand.

Generated on your device

Passwords and passphrases are created locally from a cryptographically secure random source. They are never sent, stored, or logged anywhere.

About this tool

This password generator creates strong random passwords and memorable passphrases on your device, using a cryptographically secure random source, the same quality of randomness browsers use for encryption. In character mode, every password contains at least one character from each set you enable, which keeps it valid on forms that insist on a digit or a symbol; the default is 16 characters drawn from uppercase, lowercase, digits, and symbols, and the slider goes up to 64. In passphrase mode, words are chosen uniformly at random from a large list of common words to produce something like correct-horse-battery-staple, which is far easier to remember and type than a wall of symbols.

Strength is measured in bits of entropy. For a password, length is the cheapest lever: each extra character multiplies the number of guesses an attacker needs, while adding a symbol set to a short password helps far less than adding two or three characters. For a passphrase, each added word multiplies the guesses enormously, so a five word phrase is already hard to crack; you can also capitalize each word or append a number. The strength readout under the result shows the estimate for your current settings, so you can see what a longer password or an extra word is worth. When a password has to be read over the phone or typed from paper, the look-alike toggle drops 0, O, 1, l, I and the vertical bar.

Because everything happens in your browser, no server ever sees the result, which is the property you want from anything that guards an account. Bulk mode makes 5 or 20 passwords or passphrases at once for seeding test users or issuing temporary credentials; pair it with the UUID generator for matching identifiers, or fingerprint files with the hash generator.

Frequently asked questions

How does this password generator create random passwords?
Each character is drawn from your browser's cryptographically secure random source, the same quality of randomness used for encryption keys. Selection is uniform, so no character is more likely than another, and each password is guaranteed to contain at least one character from every set you enable.
What is a passphrase and when should I use one?
A passphrase is several real words joined by a separator, like correct-horse-battery-staple. It is much easier to remember and type than a string of symbols while still being hard to guess, because the words are picked at random from a large list. Use one for logins you type often, such as a device or a password manager's master phrase.
Are the results sent or stored anywhere?
No. Passwords and passphrases are generated entirely on your device and never leave your browser. Nothing is uploaded, logged, or saved; once you leave the page, the values are gone unless you copied them.
What does the strength rating mean?
It is an estimate of entropy, measured in bits, based on your current settings. Every additional bit doubles the number of guesses required. Around 65 bits rates as Strong and 100 or more as Very strong; add length to a password or another word to a passphrase to raise it.
Should I still use a password manager?
Yes. This tool creates strong passwords and passphrases, but a manager is what stores them safely and lets you keep a different one for every account. Generate here, save it in your manager, and never reuse a password across sites.
What are the limits?
Passwords run from 8 to 64 characters across four character sets, at least one of which must stay on. Passphrases use 3 to 10 words with a hyphen, underscore, period, or space separator, plus optional capitalization and a number. You can generate 1, 5, or 20 at a time, and because everything runs locally there are no rate limits.

Related tools