Password Generator
Create strong, unpredictable passwords instantly
Security tips
- Use a unique password for every account
- Store passwords in a password manager like Bitwarden or 1Password
- Enable two-factor authentication wherever possible
- Never share passwords via email or chat
The Password Generator creates cryptographically random passwords using your browser's secure random API — not a predictable algorithm. You control the length (6 to 64 characters) and which character types to include. The strength meter updates live so you can see exactly how secure each password is before copying it.
How to Use
- Drag the length slider to set your desired password length (6–64 characters).
- Toggle uppercase letters, lowercase letters, numbers, and symbols on or off.
- Enable "Exclude ambiguous" to remove characters like 0, O, l, and 1 that look similar.
- Click Generate Password or tap the result box to create a new password.
- Click Copy password to save it straight to your clipboard.
Best Used For
- Creating strong passwords for new online accounts
- Generating API keys or secret tokens for development projects
- Security awareness training in classrooms or workplaces
- Replacing weak or reused passwords one account at a time
- Setting temporary passwords for new users in an organisation
- Generating random strings for testing or code samples
Why Use Spinnit
Passwords are generated entirely in your browser using crypto.getRandomValues() — they are never transmitted, stored, or logged anywhere. The tool is free, instant, and works on mobile. No account or email address is ever required.
Password Length and Entropy
Longer passwords are usually stronger than shorter complex-looking ones. A 16-character random password is a good baseline for most accounts, while 20 or more characters is better for email, banking, cloud storage and administrator accounts. Symbols and numbers help, but length and uniqueness matter most.
How to Use Generated Passwords Safely
- Use a different generated password for every account.
- Save passwords in a reputable password manager rather than a notes app or spreadsheet.
- Turn on two-factor authentication for email, banking, hosting and social accounts.
- Never send passwords through chat or email after generating them.
- Regenerate a password if you accidentally paste it somewhere public.
Frequently Asked Questions
Are passwords stored or transmitted anywhere?
No. Every password is generated locally in your browser using the Web Cryptography API. Nothing leaves your device — no data is ever sent to a server.
How long should my password be?
Security experts recommend at least 16 characters for most accounts. For high-value accounts like banking or email, 20+ characters with symbols is ideal. The strength meter will guide you.
Is this tool free to use?
Yes, completely free with no sign-up required.
Does this work on mobile?
Yes, all Spinnit tools are mobile-first and work on any device.