CraftTools

Password Generator

Guide: How to Create a Strong Password (and Keep It Safe)

Nothing you enter or choose here leaves your device. This tool runs in your browser.

How to use

  1. 1Choose Password or Passphrase.
  2. 2Pick a length (16 characters or more) or a number of words (6 or more), and the options you want.
  3. 3Use the slider to generate several at once if you need a batch.
  4. 4Click Copy and save it in a password manager.

Frequently asked questions

Is this password generator safe?

Yes. Passwords are created in your browser using your device's cryptographically secure random number generator.

Are generated passwords stored or sent anywhere?

No. Passwords are never sent or saved. They exist only on this page until you close or refresh it. Only your settings, such as the length, are remembered on this device.

What is a passphrase, and is it as strong?

A passphrase is several random words, such as copper-lantern-tulip-orbit-fable. It is easier to type and remember. Each word adds about 9.5 bits of strength, so 6 or more words is a good choice, and the strength meter shows the estimate.

How long should my password be?

Use at least 16 characters for important accounts. Longer is stronger.

What does "exclude ambiguous characters" do?

It removes look-alike characters such as l, 1, I, O and 0 so the password is easier to read and type.

Read the guides

Learn how this works and how to get the most from it.

Security

How to Create a Strong Password (and Keep It Safe)

Why length beats complexity, how long a password should be, how passphrases work and how developers should store passwords.

2 min read

Security

What Is a Hash Function? MD5, SHA-256 and Bcrypt Explained

Learn what hashing does, why the same input always gives the same hash, which algorithms are still safe, and why passwords need bcrypt.

1 min read

Security

How to Choose a Good Username (and Keep It Safe)

What makes a username memorable and safe, what personal details to leave out, and how to pair it with a strong password.

1 min read

Security

How Password Encryption Works (AES) and When to Use It

What AES encryption does, why a password becomes a key, how to protect a message or file, and what you can't recover if you forget the password.

2 min read

Hash Generator

Generate MD5, SHA-1, SHA-256 and SHA-512 hashes and HMACs.

UUID & Random Number Generator

Generate secure UUIDs (v4, v7) and random numbers.

Base64 & URL Encoder / Decoder

Encode and decode Base64 and URL-encoded text instantly.

JWT Decoder

Decode a JSON Web Token and check its expiry and signature.