A cryptographically strong generator from the team behind the Credly vault. Tune it, copy it, and never reuse a weak password again.
Your browser's crypto engine draws true randomness — no server ever sees the result.
Dial in length, character sets, or switch to a memorable passphrase or numeric PIN.
One click to the clipboard, wiped again after 60 seconds — paste it straight into the sign-up form.
Not an ad-funded tool. Everything here exists to make your credentials genuinely unguessable.
Backed by crypto.getRandomValues — the same source browsers trust for encryption keys.
A five-segment meter scores every result in real time as you change the controls.
Three modes, each with their own controls — random strings, readable phrases, numeric codes.
8 to 64 characters, per-set toggles, ambiguous-character filtering, custom separators.
Credly’s apps, extension and CLI use this exact generator, so what you make here is what your vault makes.
Copied passwords wipe from the clipboard after 60 seconds, so nothing lingers.
Average time to brute-force a random password of upper- and lowercase letters, digits and symbols (75 characters), for an attacker making a trillion guesses a second.
Upgrade only when you want Credly to store, sync, and watch over what it makes.
Share credentials across your team — without ever holding anyone's secrets on our servers.
Give each team its own vault, with owner, admin, member and viewer roles.
Share a single login read-only or editable with a teammate, and revoke it any time.
An append-only record of changes and API-token use on every account.
A full CLI, scoped API tokens, secret injection with credly run, and an SSH agent.
This one never sends your password anywhere. It is generated inside your browser with the Web Crypto API (crypto.getRandomValues), and it is never transmitted, stored or logged. Once the page has loaded, it keeps working offline.
Use at least 16 random characters for anything that matters. At a trillion guesses a second, an 8-character random password falls in minutes, 12 characters takes about 500 years on average, and 16 characters about 16 billion. If a site allows longer passwords, go longer. The generator goes up to 64 characters.
A passphrase is easier to read and type by hand. Each word adds about 9 bits of randomness, so choose eight words or more for anything important: eight words take about 130 years to brute-force at a trillion guesses a second, while five fall in under a minute. A random password packs more strength into each character, which makes it the better pick when a password manager will fill it in for you.
No. The generator is free, and it needs no sign-up, no email and no install. You only need a Credly account if you want to save, sync and autofill what you generate.
Credly is a zero-knowledge password manager. Your vault is encrypted on your device with keys derived from your master password and your Secret Key, so Credly's servers only ever hold encrypted data they cannot read.
Credly stores your passwords end-to-end encrypted, autofills them everywhere, and flags the weak ones before attackers do.