Strong Password Generator
Generate a strong password that would take centuries to crack, created on your own device and never transmitted.
- Runs on your device
- No watermark
- Free, no signup needed
- Available offline
Make a list
Generated on your device with crypto.getRandomValues. Nothing is sent or stored. Passphrases use the EFF long word list (7,776 words).
A username that does not contain your name, birth year or town keeps your accounts harder to link and your security answers harder to guess.
Make a list
Made on your device from a hand-picked list of friendly words. Nothing is sent, so names are not checked against existing accounts.
Has this password appeared in a data breach?
Optional, and only when you press the button. Your password never leaves this device: it is turned into a SHA-1 fingerprint here and only the first 5 of its 40 characters are sent to Have I Been Pwned. The list of matching fingerprints comes back and is compared on your device.
Strength
How to use it
- Choose a random password or a passphrase.
- Set length and character types.
- Copy it straight into your password manager.
Questions
Is this really random?
Yes. It uses your browser's cryptographically secure random generator (crypto.getRandomValues) with unbiased selection, the same source password managers use.
Do you see or store my passwords?
No. Passwords are generated inside your browser and never leave your device.
Random password or passphrase?
Random characters are best when a password manager remembers them. Passphrases (several random words) are easier to type and remember, and still very strong at 5+ words.
How long should a password be?
16 or more random characters is a good rule for most accounts. NIST's password guidance (SP 800-63B-4) sets 15 characters as the minimum when a password is the only sign-in step, and favors length over forced symbols.
Keep exploring In-Right
Independent reviews and buying guides for the gear behind the task.
