Password Generator
Press the button to create a random password that is hard to guess. Generated passwords are never stored, so please keep them safe yourself.
Options
Bulk generateCopy the list to hand out
Press “Generate list” and the passwords will appear here.
What this tool does
HANEPass is a free tool that creates random passwords that are hard to guess. (We cannot guarantee the security of any generated password.) No installation or sign-up is needed. Everything happens inside your browser — passwords are never sent to or stored on a server.
-
🎲Cryptographic randomness
Uses the cryptographic random number generator built into your browser. There is no pattern, so the chance of the same password being produced twice is tiny.
-
⚙️Fine-grained options
Choose the length, whether to use digits, letters and symbols, and exactly which symbols. Easily match rules such as “letters and digits only”.
-
👀Skip look-alike characters
Leave out characters that are easy to confuse, such as the digit 0 and the letter O, or the digit 1 and the letter l. Handy when you hand passwords out on paper.
-
📋Bulk generation
Create up to 50 passwords at once and copy the list — useful for issuing initial passwords to a team.
-
💾Save your favourite settings
Name and save option sets such as “for systems that don't allow symbols”. Only the options are saved — never the passwords you create.
As a rough guide to strength, we show the password's entropy in bits. This is a theoretical value for a brute-force attack and does not guarantee real-world security. Making a password longer raises the number more than adding character types.
How to use it (3 steps)
-
Choose your optionsPick the length and character types. If you have no specific rules, the defaults (16 characters, all types) are fine.
-
RegenerateEach press of “Regenerate” shows a new password. Press as many times as you like.
-
Copy and store itPress “Copy” and paste it into the sign-up form. Everything is cleared when you close this page, so be sure to store it yourself.
When it comes in handy
Signing up for a new service
Create a different password for each service and stop reusing passwords.
If you use the same password on several services, a leak from just one of them can let attackers into the others. The recommended practice is a unique password for every service, saved in your browser or a password manager.
Issuing initial passwords to staff
Use “Generate list” to make as many as you need, then copy the list into your distribution sheet.
If you hand them out on paper or read them aloud, turn on “Avoid look-alike characters” to cut down on mix-ups between 0 and O or 1 and l.
Always ask recipients to change the password they were given.
When you need a really secure password
Turn on every character type and set the length to 20 or more.
The surest way to make a password stronger is to make it longer. Length raises the entropy (bits) more than adding character types. If you don't need to memorise it (because it lives in your browser or password manager), a long password costs you nothing.
Some systems reject symbols. In that case, untick “Symbols” and make the password longer instead — even letters and digits only, 20 characters is quite strong. If only certain symbols are allowed, edit the “Symbols to use” field to match.
We make no guarantee as to the accuracy or completeness of the explanations on this page or the output of this tool. The strength shown is a theoretical value for a brute-force attack and does not guarantee real-world security. You are responsible for storing and managing the passwords you generate. We accept no liability for any loss caused by leaked or misused passwords. See our Terms of Use and Privacy Policy for details.