Generators
Password Generator
Strong random passwords, made on your device with your browser’s Web Crypto API. Passwords are never sent or stored.
- Made on your device
- Web Crypto randomness
- Passwords never stored
How should it look?
Your password
Your password pops up here
Choose the length and types, then press Generate new.
·
Strength is estimated from the length and character types, assuming an attacker knows exactly how this tool works. It applies to passwords generated here, not to passwords you make up yourself.
Your password is created on this device. It is never sent to Biberks or stored. Close the tab and it’s gone. Your clipboard may keep a copy until you copy something else.
How it works
Every password is made on your device. Nothing is sent anywhere.
- Randomness
- Each character is chosen with your browser’s Web Crypto API (crypto.getRandomValues). Draws that would favour some characters are thrown away, so every character in the pool is equally likely.
- Every type you chose
- If a password is missing one of your chosen types, the whole password is drawn again. Every valid password stays equally likely; nothing is “inserted” afterwards.
- Strength in bits
- We count exactly how many valid passwords your settings allow, then show that number in bits. 16 characters from all 88 characters is about 103 bits; 12 lowercase letters is about 56.
- Look-alikes and symbols
- “Avoid look-alikes” leaves out I l 1 O 0 o and |. “Site-safe” uses 13 symbols that most sites accept.
Security tips
Use a different password for every site, so one leak can’t unlock the rest. A password manager can create and remember them for you. Need a name to go with it? Try the Username Generator. Sharing your Wi-Fi password? The QR Code Generator can turn it into a code guests can scan.
Questions
Is this password generator secure?
Each character is picked with your browser’s Web Crypto API (crypto.getRandomValues), using a method with no bias towards any character. The password is made on your device and never sent to Biberks or stored. If your browser can’t make secure random numbers, the tool shows an error and makes no password at all.
What do the strength label and bits mean?
Bits measure how many different passwords your settings could produce: each extra bit doubles the number. 16 characters with all four types gives about 103 bits, which we label Excellent. The labels are Weak under 45, Fair 45–63, Strong 64–79, Very strong 80–99 and Excellent from 100.
Why does every password include each type I chose?
Some sites reject a password without, say, a number. If a freshly drawn password is missing one of your chosen types, the whole password is thrown away and drawn again. That keeps every valid password equally likely, so the bits shown stay honest.
What are site-safe symbols?
Some sites reject brackets, quotes or other punctuation. “Site-safe” uses 13 symbols that are widely accepted: ! # $ % & * + - = ? @ ^ _. “Full” uses all 26 shown under the option.
Do you store my passwords?
No. Passwords exist only on this page while it’s open. We remember your settings on this device so they’re ready next time, but never a password. Your clipboard may keep a copy until you copy something else.
Should I use a password manager?
Yes, if you can. Use a different password for every site and let a password manager remember them. Then you only need one strong password of your own, for the manager itself.