KeyForge

Create a strong password. Instantly.

Free, client-side password generation.
Secure by design. Private by default.

16
Character sets

At least one character set must remain active.

StrengthVery strong
Entropy0 bits

Generated locally in your browser. Nothing is ever sent, stored, or logged.

How it works

  1. 1

    Choose your settings

    Set the length and character types you need.

  2. 2

    Generate securely

    Your browser uses cryptographic randomness—never a server.

  3. 3

    Copy and use

    Copy once, then save it in a trusted password manager.

Password tips

Small habits make the biggest difference.

  1. 01

    Use 16+ characters

    Length is one of the simplest ways to increase security.

  2. 02

    Never reuse passwords

    One breach should never unlock another account.

  3. 03

    Turn on 2FA

    Add a second layer of protection wherever it is offered.

  4. 04

    Use a password manager

    Store unique credentials without having to memorize them.

  5. 05

    Prefer unique over memorable

    Let secure tools create randomness for you.

Need to store your passwords?

Securely save and manage unique passwords with a trusted password manager.

Contains affiliate links. KeyForge may earn a commission at no extra cost to you.

Frequently asked questions

How long should a password be?

A password of 16 characters is a strong default. Longer is better for high-value accounts or anywhere you store sensitive data.

Are password generators safe?

Yes—when they use cryptographically secure randomness and process everything locally. KeyForge uses the Web Crypto API and never sends a password to a server.

What is better: a password or a passphrase?

A random password is compact and strong. A passphrase is easier to type. Both are safe when they are long, random, and unique.

Does KeyForge store my passwords?

No. KeyForge has no accounts, history, cookies, analytics, or server-side processing. Generated values exist only on your screen.

Why should I exclude ambiguous characters?

Excluding 0, O, 1, l, and I helps prevent transcription mistakes when you need to read or type a password manually.