Numbers
Password Generator
Used by developers, writers, and creators worldwide.
A password generator removes the weakest link in account security: human predictability. People default to patterns — dictionary words, birth years, keyboard walks — and attackers exploit exactly those habits with rule-based cracking tools. This generator produces truly random passwords up to any length using any mix of uppercase letters, numbers, and symbols, giving you direct control over the character set and output count. Generate up to several passwords at once, then pick the one that fits a service's specific restrictions. A 16-character password with all character types enabled would take billions of years to brute-force with current hardware. Pair the output with a password manager like Bitwarden or 1Password — copy, paste, done.
Loading usage…
Free forever — no account required
How to use
- Choose your options above
- Click Generate
- Copy your result
Detailed instructions
- Set the Password Length field to your desired character count — 16 is a solid default for most accounts.
- Choose how many passwords to generate using the 'How many' field, then toggle Uppercase, Numbers, and Symbols to match the target site's rules.
- Click the Generate button to produce your list of random passwords.
- Scan the results and click to copy the password that best fits any character restrictions the service enforces.
- Paste it directly into your password manager's entry for that account before using it anywhere else.
Use Cases
- •Creating a 32-character database password for a new PostgreSQL user in a production environment
- •Generating 10 candidate passwords at once to find one that passes a strict corporate complexity policy
- •Producing a random Wi-Fi passphrase for a guest network with symbols disabled for easier sharing
- •Seeding a staging environment with unique passwords for 50 test user accounts in a Cypress fixture
- •Resetting a compromised admin account password before rotating credentials in Bitwarden or 1Password
Tips
- →If a site rejects your password, disable Symbols first — most restrictions target special characters, not length or numbers.
- →For Wi-Fi passwords you'll type manually, turn off Symbols and set length to 12-14; mixed-case alphanumeric is easier to enter on phones without losing much security.
- →Generate 10 at once when bulk-provisioning accounts; paste the full list into a spreadsheet and assign one per user rather than reusing any.
- →Use a length of 32+ characters for database passwords and API secrets — these are never typed by hand, so longer is strictly better.
- →After generating, check that your chosen password doesn't start with a symbol if pasting into a terminal or config file, as some parsers misinterpret leading special characters.
- →Regenerate rather than modify — tweaking a generated password (e.g., swapping one character) reintroduces human patterns and reduces randomness.
FAQ
how long should a password actually be to be secure
16 characters is a solid minimum for anything sensitive — email, banking, or admin accounts. Length matters more than complexity: a 20-character lowercase-only string is harder to crack than an 8-character mixed one. Set the length to 16 or higher and keep all character types enabled for the strongest output.
are passwords generated in the browser safe — are they sent to a server
No data leaves your browser. Every password is generated locally in JavaScript, nothing is transmitted or logged, and closing the page wipes the output entirely. That makes this tool safe to use even for sensitive credentials like database passwords or admin logins.
what to do when a site doesn't allow symbols or numbers in passwords
Toggle 'Include Symbols' or 'Include Numbers' to No before generating. To keep the password just as strong without those character types, increase the length — aim for at least 20 characters when one or more sets are disabled. More length directly compensates for a smaller character pool.