How long should a password be in 2025?
- Everyday accounts: 14-16 characters.
- High-value or admin accounts: 20+ characters.
- Length beats extra symbols for real-world strength.
Build strong, random passwords with custom length and character sets. Generated locally for privacy.
Uses cryptographically secure randomness (Web Crypto API)All generation runs client-side; nothing leaves your browser.
Strict mode requires the length to be at least the number of selected sets.
Passwords are generated locally; nothing is uploaded.
Strength: Very strong (104 bits est.)
Generated password
Generate a few items to build a history.
Generate a batch to preview and export.
Passwords are compact and work well when length is limited. Passphrases are easier to remember, scale to longer lengths, and are ideal for shared or personal accounts.
Entropy estimates the search space an attacker must try. More unique characters and more length increase entropy and make offline cracking vastly harder.
Source file: app/(tools)/password-generator/client.tsx
Generation functions: generateOutput(), generatePassword(), generatePassphrase()
Auditable in under 2 minutes.
Yes. Everything happens in your browser; nothing is sent to a server.
Use longer lengths (16+), include all character sets, and avoid reusing passwords across sites.
Aim for 14-16 characters for most accounts and 20+ for critical or admin access.
Passphrases are easier to remember and can be longer. Passwords are compact and fit strict length limits.
Yes. Use Bulk generation to create 10, 50, or 100 items and export as TXT, CSV, or JSON.
Yes. Use the Show/Hide toggle to obscure the output before copying.
Keep your security workflow in one place with these complementary tools: