Free Password Generator
Generate a random password on this page with cryptographically secure randomness. Nothing is stored, and the password is not sent to analytics.
How to use
- Choose a length. Sixteen characters is a practical default for a generated password.
- Enable the character types you can paste or type (letters, numbers, symbols).
- Generate, then copy the password into a password manager — not a notes app you sync everywhere.
- Leave or refresh the page when you are done. The result is discarded.
How it works
A password is only as hard to guess as the set it was drawn from and how long it is.
This generator builds a character set from the types you enable (uppercase, lowercase, numbers, symbols) and can drop ambiguous lookalikes such as 0, O, I, l, 1 and |. Each character is chosen with crypto.getRandomValues() and rejection sampling so shorter sets are not biased.
Strength guidance is estimated entropy in bits — length times log2 of the set size — not a made-up score. Refreshing the page discards the result. Generation is local: there is no signup, and MultiConvers does not store the password.
Formula
charset = selected types minus optional ambiguous characters password[i] = unbiased random character from charset entropy bits ≈ length × log2(charset size)
Worked examples
Default strong password
Length 20, upper, lower, numbers, symbols → A 20-character password and an entropy estimate in bits
No lookalikes
Length 16, exclude ambiguous characters → A password with 0, O, I, l, 1 and | removed from the set
Useful notes
- Do not reuse the same password on multiple sites.
- This is not a password manager and does not save anything.
- Math.random() is not used.
- Generated passwords stay in your browser. They are not uploaded and are not sent to analytics.
FAQ
- Is this password generator free?
Yes. There is no signup, no payment and no account.
- Are generated passwords uploaded or stored?
No. Generation runs in your browser. The password is not sent to MultiConvers, is not stored, and is not sent to analytics.
- How is the password randomized?
The page uses the Web Crypto API (crypto.getRandomValues), not Math.random().
- What makes a generated password strong?
Length and an unpredictable character set. A long random string beats a short one with a couple of symbols. Use a unique password per site.
- How long should the password be?
For a random generated password, 16 characters is a practical starting point. Longer is stronger if you can store it in a manager.
- Is length more important than symbols?
Usually yes. Extra length on a random password adds more possibilities than swapping a letter for a symbol on a short one.
- What does the entropy number mean?
It is an estimate of how many bits of unpredictability the length and character set give you. Longer passwords and larger sets raise the number. It is not a vendor “security score”.
- Should I exclude ambiguous characters?
Useful if you will type the password from a printout. Leaving them in keeps the set larger, which adds a little entropy at the same length.
Guides
How to Create a Strong Password
Use a unique, randomly generated password for each site, store it in a password manager, and prefer length over a clever substitution on a short word.
How Long Should a Password Be?
For a random generated password, 16 characters is a practical default. Longer is stronger if a manager stores it. Site minimums of 8 characters are a floor, not a target.
Password Length vs Complexity
On a random password, adding characters usually beats adding a punctuation rule to a short string. Complexity rules still help when they stop you from using a dictionary word.
Related tools
UUID Generator
Generate one or many RFC 4122 UUID v4 values in your browser. Copy or download as TXT.
Hash Generator
Hash text with SHA-256, SHA-384 or SHA-512 in your browser. Output is lowercase hex. Hashing is not encryption.
QR Code Generator
Create static QR codes for URLs, Wi-Fi, text, email, SMS and contacts. Download PNG or SVG in your browser — no signup.
See all Utilities tools.