Free Secure Password Generator - CSPRNG Passwords & Passphrases

Create uncrackable passwords using the browser Crypto API. Customize character types, exclude ambiguous symbols, check NIST entropy in real-time, and generate in bulk.

Secure Password Generator

Cryptographically secure CSPRNG password and passphrase generator

Password Settings

Password Length16 characters


Generated Password
Entropy:0 bits
Select at least one character set
Security StrengthVery Weak

How to generate a strong password

  1. Set the password length (6 to 64 characters). 16 or more is recommended for important accounts.
  2. Choose which character sets to include: uppercase, lowercase, numbers and symbols.
  3. Optionally exclude ambiguous characters such as i, l, 1, L, o, 0 and O if you will need to type the password by hand.
  4. Check the entropy and strength meter, then copy the password - or generate several at once and copy them all.

What makes a password strong

Length matters more than complexity. Each extra character multiplies the number of possible passwords, so a random 16-character password using all four character sets has over 100 bits of entropy - far beyond what can be brute-forced. The strength meter shows the entropy of your current settings so you can see the effect of each option.

Generated with your browser’s secure random source

Passwords are created with the Web Crypto API (crypto.getRandomValues), a cryptographically secure random number generator, not the predictable Math.random. They are generated on your device and never transmitted or logged - Pikden never sees them.

Store it in a password manager

Use a different password for every account and keep them in a password manager so you don’t need to remember them. Turn on two-factor authentication wherever it is offered.

Frequently asked questions

Are the generated passwords stored or sent anywhere?

No. They are created in your browser and exist only on your screen until you copy them.

How long should my password be?

At least 12 characters; 16 or more for email, banking and password-manager master passwords.

Is this generator truly random?

Yes. It uses crypto.getRandomValues, the cryptographically secure random source built into every modern browser.

Related tools