DigiKitPassword Generator
Generate strong random passwords.
How it works
Generate strong random passwords.
FAQ
This tool is free for core use.
When should you use this?
Use this when you need to generate a random, unguessable, strong password for a new account.
When shouldn't you use this?
Don't reuse the password you generate across multiple accounts; generating a separate one for each account and keeping them in a password manager prevents a single leak from compromising everything.
Step-by-step
- Set the number of characters in Length. For passwords that live in a password manager, 16 or more is easy to use.
- Click Generate password. The password is created in your browser and never sent to a server.
- Paste it straight into the sign-up form and into your password manager.
- If the site rejects it, change the length and generate a new one.
Example
You find out the password for an old email account turned up in a data breach, and you remember using the same password on a few other sites. Generate a separate password for each account and store every one in your password manager. Any future breach then only exposes that single account. Start with the email account, because password reset links for everything else land there. A password manager also keeps a list of your accounts, which makes it easy to see which ones you have not updated yet.
Why should a strong password be long and random?
Programs that try to crack passwords test possible combinations; each extra character multiplies that number. A long randomly generated password is far stronger than a memorable but guessable one. The tool generates passwords in your browser and does not send them to a server.
For password security
- Use a separate password for every account; if one leaks the others are unaffected.
- Store the generated passwords in a password manager so you do not have to memorise them.
- Turn on two-step verification wherever possible.
- Do not send a password by email or message; if you must share it use a secure method.
Things to keep in mind
- Long random strings are painful to type on a smart TV or game console. For devices like that, a word-based passphrase is often more practical.
- Some banking and government sites reject certain symbols or lengths above a limit. Read the error and generate a password that fits.
- Saving the password in a notes app or emailing it to yourself leaves it sitting somewhere unencrypted.
- A strong password isn't the whole story. Turn on two-factor authentication wherever it is offered.
Frequently asked questions
Is the generated password/key saved anywhere?
No, it's generated entirely in your browser using a cryptographically secure random generator (crypto.getRandomValues) and never sent anywhere.
How secure is it?
It uses the browser's built-in cryptographic random number generator, producing results that are practically impossible to predict.
Should I save the generated password somewhere?
Yes, the result is lost when the page is refreshed or closed; we recommend storing it in a secure password manager.