Skip to content
HisabTools

Password Generator

Create a strong, unique password in one click. Passwords are generated on your own device using a secure random generator and are never sent anywhere or stored.

464

More suggestions (tap to copy)

    Runs entirely in your browser – nothing you enter is uploaded.

    How to use the Password Generator

    1. Choose the length – 16 characters or more is recommended.
    2. Select the character types to include.
    3. Tick Avoid look-alikes if you will type the password by hand (it removes I, l, 1, O, 0).
    4. Click Copy and save the password in a password manager.

    Formula

    Entropy (bits) = length × log₂(pool size)
    • The pool size is the number of different characters allowed. Each extra bit doubles the number of guesses an attacker needs.
    • Below 40 bits is weak, 60+ is strong and 90+ is very strong.

    Worked example: Why length matters

    An 8-character password using all four character types has about 52 bits of entropy. At 16 characters it reaches about 103 bits – not twice as strong, but trillions of times stronger.

    Password safety tips

    A strong password only helps if you use it well:

    • Use a different password for every account, especially email and banking.
    • Store passwords in a reputable password manager instead of a notebook or chat.
    • Turn on two-factor authentication (OTP or authenticator app) wherever possible.
    • Never share passwords or OTPs on calls, SMS or WhatsApp – banks never ask for them.

    Frequently asked questions

    Is it safe to generate passwords online?

    This generator runs entirely in your browser. Passwords are never sent over the internet or saved by us.

    How long should a password be?

    At least 12 characters; 16 or more is better for important accounts.

    What does “avoid look-alikes” do?

    It removes characters that are easy to confuse, such as I, l, 1, O and 0, which helps when typing a password by hand.

    Do I need symbols?

    Symbols increase strength, but length matters more. If a website does not allow symbols, use a longer password.

    Last updated: