Made on your device, never sent
Free tool
A random password in one click, made by your own browser's secure random number generator. Nothing is sent to us or anyone else, and nothing is kept.
Change the options and a new one is made straight away.
Need to send it to someone? Share it with a one-time link.
Good habits
Every extra character multiplies the guesses needed. A random 16 character password would take far longer to crack than any human-chosen word with a number on the end. For important accounts, use 20 or more.
When one website is breached, attackers try the same email and password everywhere else. A different password for every site means one breach stays one breach.
Nobody can remember dozens of random passwords. A password manager remembers them for you, so the only one you need to know is its own.
Even a perfect password can be phished. A code from an app on your phone stops most account takeovers, especially for email, banking and your website's admin.
Yes. The password is made by your browser's built-in cryptographic random number generator, on your device. It's never sent to us, and there's no tracking or advertising code on this page to see it.
Free tools
Encrypted in your browser
Send a password or note as a link that works once, then deletes itself. Encrypted in your browser, so not even we can read it.
Create a secure linkChecked without being sent
See if a password has turned up in a known data breach, without the password ever leaving your device.
Check a password30+ checks, in plain English
Check a domain's nameservers, website, MX, SPF, DMARC and more, in plain English with how to fix each problem.
Run a DNS reportFor wp-config.php and .env
Fresh security keys and salts for wp-config.php, made in your browser. Change them after a hack to sign everyone out.
Make new saltsBy our sister site, SitePulse
A free check of your WordPress site from the outside, by SitePulse: the versions it gives away, files that shouldn't be public and common weak spots.
Scan with SitePulse