Creating a unique password for any new account that goes into a password manager. Generating a master password or a recovery passphrase you'll commit to memory — passphrase mode is easier to type and remember. Producing a non-human secret for a CI variable, API token, or Wi-Fi network. Bulk-generating passwords for a fresh user batch (set count up to 50).

Don't reuse passwords. The single biggest security upgrade you can make is one unique password per site, stored in a manager. Generator strength is wasted if the same password lives on five sites. Don't write generated passwords down without protection. Use a password manager (1Password, Bitwarden, KeePass) — not a Notes app, not a text file, not an email draft. Long > complex. A 24-character password using only lowercase letters has more entropy than a 10-character one with every symbol class. Length wins. Site-specific rules can break copy-paste. Some sites ban specific symbols or cap length at 16. Annoying but real — generate, then trim/swap to fit if needed (and then store the actual stored password in your manager).

Passwort-Generator

Sichere Zufallspasswörter oder einprägsame Passphrasen. Lokal erzeugt – wird nie übertragen.

Typ

Anzahl (1-50)

Länge: 20

a-z lowercase A-Z uppercase 0-9 digits Symbols !@#$… Exclude ambiguous (0/O/1/l/I)

Ausgabe

Geben Sie oben eine Eingabe ein, um das Ergebnis zu sehen.

What is this for?

A good password is one an attacker can't guess and you don't have to remember (because it's stored in your password manager). This generator produces strong random passwords or memorable passphrases entirely in your browser, using crypto.getRandomValues — the same cryptographically secure random source TLS uses. Nothing is transmitted; the password never leaves your device.

When to use it

Creating a unique password for any new account that goes into a password manager.
Generating a master password or a recovery passphrase you'll commit to memory — passphrase mode is easier to type and remember.
Producing a non-human secret for a CI variable, API token, or Wi-Fi network.
Bulk-generating passwords for a fresh user batch (set count up to 50).

Random characters vs passphrases

Random characters — most entropy per length. 20 mixed characters ≈ 130 bits. Right for things you paste, not type.
Passphrases — easier to type and remember. Four words ≈ 40 bits, six words ≈ 60 bits. Right for master passwords, device unlock, and anything you'll enter manually often.
"Exclude ambiguous" drops 0/O/1/l/I for safer reading from screens or hand-written notes.

How much entropy do I need?

≥ 60 bits — fine for low-value accounts
≥ 80 bits — good for most accounts
≥ 100 bits — high-value (financial, master password, root credential)

Common gotchas

Don't reuse passwords. The single biggest security upgrade you can make is one unique password per site, stored in a manager. Generator strength is wasted if the same password lives on five sites.
Don't write generated passwords down without protection. Use a password manager (1Password, Bitwarden, KeePass) — not a Notes app, not a text file, not an email draft.
Long > complex. A 24-character password using only lowercase letters has more entropy than a 10-character one with every symbol class. Length wins.
Site-specific rules can break copy-paste. Some sites ban specific symbols or cap length at 16. Annoying but real — generate, then trim/swap to fit if needed (and then store the actual stored password in your manager).