Random & Fun
Generate a password worth using
Generate a password or a passphrase. It uses your browser’s cryptographic random number generator, guarantees one character from each set you pick, and tells you how strong the result actually is.
20
Length
129 bits
Entropy
Very strong
Strength
Generated in your browser using its cryptographic random number generator. Nothing is sent anywhere, and nothing is stored — closing the page loses it, so copy it somewhere safe first.
- Runs in your browser
- No account required
- Free to use
How it works
Not Math.random
Math.random is a fast pseudo-random generator whose future output can be predicted from a handful of previous values. That is fine for a dice roll and unsuitable for a secret. Everything here draws from the platform’s cryptographic generator — and where that is missing entirely, nothing is generated rather than something weaker than it looks.
No modulo bias
Turning a random number into a range with `%` is biased whenever the range does not divide evenly — the first few characters of the alphabet come up measurably more often. Values outside the unbiased range are discarded and redrawn instead.
One from each set, guaranteed
Drawn freely, a 12-character password from a four-set alphabet has a real chance of containing no digit at all — and then fails the policy it was generated for. One character from each selected set is placed first and the whole thing shuffled.
Entropy, not a strength meter
The figure shown is bits of entropy: the alphabet size raised to the length, in logarithms. It is a property of how the password was generated, unlike the coloured bars that guess at strength by looking at the result.
What it does
Passwords and passphrases
A passphrase of four common words is easier to type and remember than a random string at comparable strength — worth considering for anything you type by hand.
Look-alike characters optional
Excluding I, l, 1, O and 0 costs a little entropy and saves the confusion of reading a password off one screen and typing it into another.
Entropy and a verdict
Bits, plus what that means in words.
Runs in your browser
No account and no upload — what you type is never sent anywhere. Analytics records that the tool was opened, never what you put into it.
Practical advice
Getting a better result
- Length beats complexity. A 20-character password of lowercase letters is stronger than an 8-character one using every symbol on the keyboard.
- Nothing is stored — closing the tab loses the password. Copy it into your password manager before navigating away.
- Above about 80 bits of entropy, the password is not what an attacker will go after. Reuse and phishing are the real risks.
- A passphrase is the better choice for anything you have to type on a phone or read aloud.
Questions
Things people ask
Is it safe to generate a password on a website?
It depends entirely on the website, which is why this one is worth checking: the page makes no network requests at all, so the password cannot leave your browser. You can confirm that by opening your browser’s network tab while generating one. If you would rather not trust any page, your password manager generates them locally too.
What is entropy and what number should I want?
Entropy measures how many equally likely passwords the generator could have produced, in bits. Under 40 bits is weak. 60 to 80 is strong for most accounts. Above 80 the password stops being the weak link.
Are passphrases really as strong as passwords?
They can be, and the maths is stated rather than assumed: strength is the number of words multiplied by the log of the word list size. Four words from a 500-word list is about 36 bits; more words raise it quickly. The advantage is that you can actually type it.
Related tools
Random Number Generator
Draw numbers in a range, with or without repeats.
Runs entirely in your browser
Open toolRandom Name Generator
Generate names drawn from lists spanning many regions.
Runs entirely in your browser
Open toolRandom Team Generator
Split a list of names into teams of even size.
Runs entirely in your browser
Open toolList Randomiser
Shuffle a list fairly, every ordering equally likely.
Runs entirely in your browser
Open toolWho builds these
Free tools by day. Websites that earn their keep by trade.
KuConvert is built by KUDUY, a web design and development agency. From custom WordPress builds to SEO and e-commerce, everything they do is engineered to bring you more qualified traffic and turn it into revenue.
Web Design
Custom, conversion-focused web design that captivates visitors and turns them into paying customers. Mobile-first, fast, and built to rank.
Web Development
Custom WordPress websites built with clean code, blazing-fast performance (Core Web Vitals optimised), and enterprise-grade security.
E-Commerce
Online stores that convert visitors to customers with seamless shopping experiences.
SEO
Technical SEO, keyword research, on-page optimisation and local SEO strategies that drive qualified organic traffic.
Digital Marketing
Data-driven campaigns that deliver measurable ROI across every channel.
Branding
Memorable brand identities that stand out in any market and build lasting trust.
Website Help
One-on-one expert support for bug fixes, updates and ongoing maintenance — without a long-term retainer.
Fixed scope, no surprise invoices
Most sites ship in four to eight weeks with the scope and the price agreed up front.
SEO from day one
Search is designed into the build — structure, schema and Core Web Vitals — not retrofitted.
A team, not a ticket queue
A project manager, a designer and a developer you can actually reach.
Need your whole site to load this fast?
Images are usually the heaviest thing on a page and the easiest win. KUDUY works on site speed, image delivery and Core Web Vitals for teams who would rather not do it by hand.
This tool runs entirely in your browser. Your files are never uploaded.