Strong password generator
Random, hard-to-crack passwords generated right in your browser. Nothing is sent to a server.
Time to crack
Average time. Rough estimates for 2026 hardware.
More passwords
Local only
Passwords are generated with your browser's crypto API and never leave your device.
Truly random
Uses crypto.getRandomValues with unbiased sampling, not Math.random.
Use a manager
Use a unique password for every account and keep them in a password manager.
Guides
All guides →How to Secure Your Instagram Account: 8 Steps
A step-by-step guide to protecting your Instagram account from hackers — strong password, two-factor authentication, spotting fake support messages and what to do if you've been hacked.
3 min read
Strong Password Examples: Weak vs Strong, Explained
What does a strong password look like? Weak and strong password examples, how long each takes to crack, and three ways to create one you can actually use.
3 min read
How to Protect Your WhatsApp Account From Being Hacked
How WhatsApp accounts get hijacked and how to stop it — the 6-digit code scam, two-step verification, linked devices, and what to do if your account was stolen.
3 min read
From the terminal
Developers can get a password without opening the browser:
curl hardpassword.org
curl "hardpassword.org?length=32&count=5&symbols=0"
curl hardpassword.org/passphraseFrequently asked questions
What makes a password strong?
Length and randomness. A strong password has at least 16 random characters, mixes letters, numbers and symbols, and is not reused on other sites. Names, birthdays and dictionary words make it weak.
Is it safe to generate a password online here?
Yes. Passwords are created by your browser with the Web Crypto API and are never sent to our server. The page keeps working even if you disconnect from the internet after it loads.
How long should my password be?
For online accounts, 16 or more characters is a good default. For a password manager's master password or Wi‑Fi, use a passphrase of 6–7 words or 20+ random characters.