Home › Free tools › Password generator
Free tool · no sign-up
Password generator
Strong passwords, picked at random by your own device. They are never sent, never stored, never seen by anyone, not even by us.
Your password never leaves your device. Everything happens in your browser: it is not sent to us or to anyone else. Check it yourself.
What makes a good password
Length matters more than complexity. Every extra character multiplies the number of combinations to try. A password of 20 random characters withstands everything a computer can do today, even without symbols.
One password per site. It is the rule that protects you most, and the one least followed. When a website has its database stolen, the stolen passwords are immediately tried everywhere else: your e-mail, your bank, your online shopping. A unique password limits the damage to the site at fault.
Chance, not imagination. A date of birth, a child's name, a football team followed by 123!: password-cracking software tries those combinations first.
How strong to aim for
Strength is measured in “bits of entropy”: the number of times the attempts must be doubled to be sure of hitting the right one. In its 2022 recommendation, the CNIL, France's data protection authority, sets 80 bits as the minimum for a password used on its own. It gives three equivalents: 12 characters mixing upper case, lower case, digits and special characters chosen from at least 37, 14 characters mixing upper case, lower case and digits, or a passphrase of 7 words.
The gauge under the password shows its entropy, and only turns green from that threshold upwards.
Where the randomness comes from
The password is drawn by your browser's cryptographic generator, the one that secures your connections to banking sites — not by the approximate randomness of ordinary functions, predictable to anyone who knows how. Each draw is unbiased; the only added rule: at least one character from each ticked family, to satisfy the sites that require it.
Everything happens on your device. The password is sent nowhere and stored nowhere: close the page, and it only exists where you pasted it.
And to keep your documents somewhere safe?
These tools are free and will stay free. Our trade is hosting files, photos and e-mail on our own servers, in Frontenex, Savoie, France: not with an American giant, not with a rented host. When you call, the person who runs the machines is the one who answers.
The free plan gives you 5 GB of storage and an e-mail address, with no credit card.
Try ArkiaSuite for freeFrequently asked questions
Is the password stored or sent anywhere?
No. It is picked at random by your browser, on your device, and is neither sent to our server nor kept. You can check it by cutting the Internet: the generator keeps working.
What length should I choose?
At least 14 characters for an ordinary account, and 20 or more for your e-mail, your bank and your password manager. With a manager, length costs nothing: you do not have to remember it.
How can I remember all these passwords?
You don't: you hand them to a password manager, which keeps them encrypted and fills them in for you. Bitwarden and KeePassXC are free and open source. You then have only one password left to remember, the manager's, and it must be the strongest of all.
Should I change my passwords regularly?
That is no longer the recommendation. Changing often pushes people towards weak, predictable passwords. Change one when the website concerned has been hacked, or if you think it may have been seen or guessed.
Are symbols essential?
No. They make each character harder to guess, but a few more characters have the same effect. If a website refuses some symbols, untick them and make the password two or three characters longer.