Humans are bad at "random"
Patterns based on names, dates, or keyboard walks (like "qwerty123") are exactly what password-cracking tools try first. A generator picks characters with no pattern at all.
Free tool — no sign-up
Create a strong, random password or a memorable passphrase instantly. Everything happens right here in your browser — nothing you generate or copy is ever sent to a server.
Keep this private key secret — anyone who has it can impersonate you or decrypt your traffic.
Scan with your phone's camera to use this instantly on another device — nothing is uploaded, the code is generated and read entirely on your own devices.
Your browser doesn't support Ed25519 key generation — try the latest Chrome, Edge, or Firefox, or pick RSA/ECDSA instead.
Want PassKub to remember this password for you — encrypted, organized, and auto-filled everywhere? Download PassKub free.
Why it matters
Patterns based on names, dates, or keyboard walks (like "qwerty123") are exactly what password-cracking tools try first. A generator picks characters with no pattern at all.
Reusing a password across sites means a single leaked database can unlock your email, banking, and social accounts too. A unique generated password per account limits the blast radius to just one.
Length matters more than substituting a letter for a symbol (like "P@ssw0rd"). A random 16+ character password or a 4+ word passphrase is dramatically harder to crack than a short "clever" one.
Beyond generating
PassKub is a free password manager that generates, encrypts, and auto-fills passwords like the one above across every device — so you never have to type or remember a strong password again.
Every entry is encrypted on your own device with Argon2id + AES-256-GCM before it's ever stored — see how it works.
The full app includes its own generator plus a zxcvbn-style strength analysis for every password you already have saved — see all features.
Android, iOS, Windows, macOS, and Chrome/Edge — one vault, everywhere. Download PassKub free.
FAQ
Yes. Every password or passphrase is generated entirely in your own browser using the Web Crypto API's cryptographically secure random number generator. This page makes no network requests, so nothing you generate here is ever transmitted anywhere.
No. This tool runs 100% client-side with no server calls at all. If you want to save a generated password, use the "Copy" button and paste it into PassKub's app or browser extension, where it will be encrypted with Argon2id and AES-256-GCM before it's ever stored.
For most accounts, 16–20 random characters (or a 4–6 word passphrase) gives a strong margin of safety against offline cracking attempts. Longer is always safer; the strength meter and entropy estimate on this page update live as you adjust the length.
A passphrase strings together several random dictionary words (e.g. "otter-canyon-velvet-42"). It's easier to type and remember than a random character string while still being very hard to guess, since the words and their order are chosen randomly rather than forming a real sentence.
Entropy measures how many attempts a brute-force attacker would need on average to guess your password — each extra bit doubles the search space. Around 60+ bits is considered strong for an offline attack against a well-hashed password database.
No — use a unique, freshly generated password for every account. If one site is breached, a unique password keeps every other account safe. A password manager like PassKub makes this practical by remembering every unique password for you.