Password generator●
Pick a length. Get a strong random password. Copy it and go.
A new password is created every time you change a setting. Passwords are never sent, saved or logged.
Look-alike mode removes characters such as I, l, 1, O and 0 that are easy to mix up when you read a password aloud or type it by hand.
Your password
Passwords are generated on your device with the browser's cryptographic random generator. dotool.app never sees, stores or transmits them.
Length beats cleverness.
A long random password is far harder to guess than a short one with tricks. Twenty characters from letters, numbers and symbols is out of reach for guessing attacks today. Store passwords in a password manager, use a different one for every account, and turn on two-step verification where you can.
All tools →Common questions
Is it safe to generate a password on a website?
It is safe here because the password is created inside your browser and never transmitted. The page works the same offline once loaded. As a rule, only use generators that say where the randomness comes from.
How does this generator create random characters?
It uses the Web Crypto function crypto.getRandomValues, the same source of randomness browsers use for encryption, with rejection sampling so every character is equally likely.
How long should my password be?
At least 16 characters for important accounts, and 20 or more if the site allows it. Length matters more than extra symbols.
What does entropy in bits mean?
It measures how many guesses an attacker would need. Every extra bit doubles the work, so 80 bits or more is considered very strong for online accounts.