hiptool

Password Generator

Generate strong random passwords and passphrases locally, with an entropy readout.

Random password

Passphrase

About this tool

Two generators, both running on your browser's cryptographically secure random source. The password side builds random character strings with guaranteed coverage of every set you enable, a length slider, and a look-alike filter for fonts where 0, O, l and 1 blur together. The passphrase side draws words diceware-style from the EFF's 7,776-word list, with separators, capitalization and an optional digit for sites that demand one.

The entropy readout under each result is the honest strength measure: bits of randomness, independent of how the result looks. Four random words carry about 52 bits and are far easier to type than line noise; a 20 character full-alphabet password carries about 125. Nothing you generate here is transmitted, stored or logged; the page keeps working with the network cable pulled.

Frequently asked questions

Is it safe to generate a password on a website?
Only if it is generated locally, which this one is: the randomness comes from your browser's crypto.getRandomValues and nothing is sent, stored or logged. You can verify in DevTools that the network stays silent while generating.
Password or passphrase, which should I pick?
For anything a password manager fills, a 20+ character random password is ideal. For something you must type or remember (a laptop login, the manager itself), four to six random words are far easier to enter and still very strong.
How long should a password be?
With all character sets on, 16 characters gives about 105 bits of entropy, which is beyond any practical guessing attack. Use more when a site allows it; the slider goes to 64.

Related tools

esc