SSL & Security

Password Generator

Secure Passwords

Generate a Password

Customize length and character options to create a strong, secure password.

Password Length

chars

Character Types

Tool features

Comprehensive password generation with security analysis and customization options
4 features

Secure Generation

Cryptographically secure random password generation using browser APIs

Customizable Strength

Adjust length and character types to meet your security requirements

Instant Generation

Generate passwords instantly with real-time strength analysis

Strength Indicator

Visual strength indicator with suggestions for improvement

What makes a strong password & how it works

Length, randomness and uniqueness

A strong password is one an attacker cannot guess or brute-force: long, random and unique to each account. Length matters most, because every extra character multiplies the number of possibilities; mixing uppercase, lowercase, digits and symbols adds bits per character on top.

This generator picks every character independently with the browser's cryptographically secure random source (crypto.getRandomValues), so passwords are created on your device and never sent to ShowDNS. Use a password manager to store them, so each account can have its own.

Entropy
Length × log2(character set); 80+ bits is strong, 100+ is excellent.
Unique per site
Stops one breached site from unlocking your other accounts.
Password manager
Stores unique random passwords so you do not have to remember them.

How to use this tool

Create a strong password in four steps
1
Set the length
Choose 16 characters or more; longer is stronger.
2
Pick character types
Include lowercase, uppercase, numbers and symbols unless a site restricts them.
3
Generate
Create one or several passwords locally in your browser.
4
Save it
Copy the password straight into your password manager and the site’s sign-up form.

Frequently asked questions

Common questions about passwords
5 Q&A

At least 16 characters for a random password. With all four character types that is over 100 bits of entropy, far beyond brute-force range.

Yes. Each character is chosen with crypto.getRandomValues, the browser’s cryptographically secure generator, without bias. Nothing is sent to a server.

Length adds the most strength. A 20-character lowercase password is stronger than a 10-character one with every symbol type, but combining both is best.

Some sites limit length or disallow certain symbols. Turn off symbols and make the password longer to keep the same strength.

Current NIST guidance says no, unless there is a sign of compromise. Use a unique, strong password per site and turn on two-factor authentication instead.