Password generator
Made in this browser, with the operating system’s random number generator, and never sent anywhere. The strength number below is the real one — not the length times a rounded-up guess.
—
Worth it for something you will read off a screen and type somewhere else. It costs strength — a smaller alphabet is fewer bits — and the number above drops when you tick it, which is the point.
The symbols are !#$%&()*+,-./:;<=>?@[]^_{|}~ — no quotes, no backslash, no spaces. Not squeamishness: a password with a quote in it breaks when you paste it into a .env, a YAML file or a connection string, and the error you get says “syntax error” three layers down.
Nothing here is sent anywhere, and you can check that
The generating happens here, in JavaScript, using the random number generator your operating system provides. Open your browser’s network tab and generate fifty: nothing goes out. To be exact about it — the header at the top of every page on this site does ask our API which plan your key is on when the page loads, and that request carries nothing from this box and does not repeat. What is generated below never leaves.
It matters more than it sounds: a password that travelled to a server to be created is a password that sat in that server’s access log, in whatever proxy is in between, and in someone’s backup.
Which also means: we cannot see what you generated, so we cannot get it back for you. Put it somewhere before you close the tab.
Rotating a mailbox password?
If you are here because you are moving a mailbox or handing a server over, the IMAP migration tool copies mail between two servers keeping folders, read marks and dates — and opens the source read-only, so a wrong password there cannot cost you anything.