Generate a password that fits a site's rules
Letters and digits only? Just two allowed symbols? Set the rules before generating.
If a signup form rejects a generated password, match the generator's settings to the form's actual rules before generating another one. A site may limit the length or accept only a few symbols. Adding more punctuation will not fix a punctuation restriction.
The password generator starts with a 20-character password. Its settings let you change the length, character groups and exclusions. The two examples below describe fictional site rules, not recommendations to reuse a particular password.
A site that accepts letters and digits only
Leave Password selected. Set Length to 20, enable Lowercase (a–z), Uppercase (A–Z) and Numbers (0–9), and switch off Symbols (!@#). Select Generate after changing the settings.
The result contains at least one character from every enabled group. With symbols off, it contains no punctuation. Avoid similar characters is on by default and removes I, l, 1, O, 0 and o from the available characters. Turn it off if you want those characters available too; this option is for legibility, not an extra security layer.
Use the site's real length limit. The UI offers 8–64 characters; a longer generated password is no help if the receiving form refuses it. After adjusting the length, generate a fresh candidate that meets the chosen settings.
A site that allows only hyphen and underscore as symbols
Keep the three letter-and-digit groups enabled, switch Symbols (!@#) on, and paste this into Exclude characters:
!@#$%^&*()=+[]{}:,.?
That removes all the generator's symbols except - and _. Select Generate. The result includes at least one of those two symbols, alongside lowercase, uppercase and digits; it does not promise to include both symbols.
Exclusions apply to every enabled group, not just symbols. If you exclude every character in a group while leaving that group enabled, generation fails. Either leave an allowed character available or switch the empty group off.
The settings file records both examples for reference. Enter them using the controls; the generator does not have a settings-file import button. There are no passwords in that download.
Pause before copying or typing
An unused result refreshes after 30 seconds while the page is visible. Pause keeps the current result in place, and Resume starts a new countdown. Selecting or focusing the result, or using Copy, also pauses the refresh so it will not change while you are using it.
This countdown replaces the displayed candidate. It does not rotate a password already saved on another website. Changing settings clears the candidate; Generate creates a new one. On a phone, pause first if you plan to switch apps and enter it by hand.
Store an accepted password in your password manager. The generator does not keep a recoverable password history. Copying places the result on your device's clipboard, where clipboard-history or sync features may retain it.
When a passphrase fits better
Passphrase generates random English words from the EFF wordlist. You can choose 4–10 words and a hyphen, space or dot separator. Six words is the default. This can help when typing a long secret, provided the destination accepts its length and separator.
Passphrases have separate controls: the password mode's digit and symbol requirements do not carry over. A form that requires a digit may reject a words-only passphrase. Use the mode that fits the destination rather than assuming a phrase satisfies every password policy.
Generation uses the browser's cryptographic random-value API on your device. Our results record checks 32 generated passwords for each example and 16 six-word passphrases on 6 November 2026. It records only settings and pass/fail checks; generated secrets are discarded. This verifies the described constraints, not a predicted time to crack a password.