Skip to main content
Back to Numbers generators

Numbers

Secure Password Generator

Used by developers, writers, and creators worldwide.

A secure password generator removes the guesswork from creating credentials that hold up against brute-force and credential-stuffing attacks. Set your length (default 16, go higher for vaults), toggle uppercase, numbers, and symbols on or off, and generate up to five passwords in one run — or more if you need a batch. All generation happens locally in your browser, so nothing leaves your device. Most breaches trace back to weak or reused passwords. A 16-character fully random string has no dictionary entry, no personal detail, and no exploitable pattern. That combination of length and character variety is exactly what a password manager like Bitwarden or 1Password was built to store and recall.

Loading usage…

Free forever — no account required

How to use

  1. Choose your options above
  2. Click Generate
  3. Copy your result

Detailed instructions

  1. Set the password length using the length field — 16 is a safe default, go higher for sensitive accounts.
  2. Toggle uppercase, numbers, and symbols on or off to match the target site's character requirements.
  3. Set the count field to how many passwords you need, then click Generate.
  4. Review the list and click any password to copy it directly to your clipboard.
  5. Paste it into your password manager or account registration field immediately — don't store it in plain text.

Use Cases

  • •Generating a 20-character mixed-character master password for a new Bitwarden vault
  • •Provisioning unique credentials for 20 employee accounts during an IT onboarding sprint
  • •Seeding test user accounts in a Postgres staging database with randomised passwords
  • •Creating symbol-free passwords for legacy systems that reject special characters
  • •Replacing reused passwords across multiple accounts after a known data breach

Tips

  • →If a site rejects your password, disable symbols first — many systems silently block characters like < > or & even without warning.
  • →Generate at length 20+ for email and banking accounts; these are the master keys attackers target first.
  • →When provisioning test accounts, set count to 20 and copy the full list into a CSV — saves regenerating mid-setup.
  • →Avoid reducing length below 12 even for throwaway accounts; short passwords can be cracked in minutes if a database leaks.
  • →For systems requiring exactly one number or one symbol, generate several options and pick one that naturally satisfies the rule rather than editing outputs.
  • →Run multiple batches if you need passwords of different lengths — set length to 12, generate five, then switch to 20 and generate five more for different account tiers.

FAQ

how long should a secure password be

16 characters is a solid baseline for most accounts. For high-value targets like email or password manager vaults, go 20 or longer. Length compounds with character variety — a 20-character mixed password is exponentially harder to crack than a longer but lowercase-only one.

are passwords generated in the browser actually safe

Yes. This secure password generator runs entirely in your browser using local JavaScript — nothing is sent to a server, logged, or stored anywhere. You can disconnect from the internet and it still works. The only copy of your password exists in your browser tab until you navigate away.

what's the difference between a random password and a passphrase

A random password is a short, dense string of mixed characters; a passphrase is a longer sequence of random words. Both can be strong — passphrases win on memorability, random passwords win on entropy per character. Crank the length to 30+ here if you want passphrase-level strength in a single string.