Password Generator
Generate strong random passwords with your chosen length and character mix. You can create up to 50 at once, exclude look-alike characters, and see the actual entropy in bits rather than a vague strength bar.
Passwords are produced by your browser's cryptographic random number generator and never transmitted anywhere.
How to use the password generator
Set the length and choose which character types to include.
Pick how many passwords you want.
Click Generate, then copy the ones you need.
Why use the Convert Now password generator
Cryptographically secure
Uses the browser's real random source, not Math.random.
Real strength metric
Entropy in bits, with an honest crack-time estimate.
Bulk generation
Up to 50 at once with copy and download.
Never transmitted
Generated locally and never stored.
What actually makes a password strong
Strength comes from entropy – the number of possibilities an attacker must search – and entropy comes from length far more than from complexity. A 16-character password drawn from lowercase letters alone has more entropy than an 8-character password using every character type. Substitutions like replacing a with @ add almost nothing, because cracking software has tried them since the 1990s. Length is the lever that matters; aim for 16 characters or more wherever a site allows it.
Why generation must be local
A password created on a remote server has, by definition, existed on somebody else's machine. Even with good intentions, that is a log line, a memory dump or a breach away from exposure. These passwords are generated with crypto.getRandomValues, the same cryptographically secure source browsers use for HTTPS key material, and they exist only in your browser's memory until you copy them. Nothing is sent, and nothing is stored.
What to do with them
A strong random password is only useful if you do not have to remember it, which means a password manager. Generate a unique password for every account and let the manager store it; reuse is what turns one site's breach into a compromise of your email, bank and everything else. Turn on two-factor authentication wherever it is offered — it protects the account even if the password does leak.
Read the guide: How to Create a Strong Password (That You Can Remember)
Frequently asked questions
What makes a password strong?
Length above all, then a mix of character types. Sixteen or more random characters is a good target, and every account should have a different one.
Are these passwords really random?
Yes. They use crypto.getRandomValues, the browser's cryptographically secure random generator, not the predictable Math.random.
Is it safe to generate a password online?
It is safe here because generation happens in your browser and nothing is transmitted. Be cautious with tools that generate on a server.
How long should my password be?
At least 12 characters, ideally 16 or more. Length adds far more security than substituting symbols for letters.
Should I use a passphrase instead?
A long random passphrase of four or five unrelated words is strong and easier to type. Both approaches work; what matters is length and uniqueness.
Do you store the passwords I generate?
No. They exist only in your browser and disappear when you close the tab.
Generators — all free
Every tool on Convert Now runs in your browser. No account, no limits, nothing uploaded.
Browse all generators