Free toolPasswords
Make a strong password in your browser.
A random password or passphrase, made on your device by its own cryptographic generator. It is never sent anywhere — not to Runner, not to anyone — and the page keeps working offline once it has loaded.
Runs in your browser. The passwords it makes are never sent anywhere, to anyone.
About 126 bits of randomness — Very strong
20 characters, each drawn equally from 78 allowed characters.
How it works
Pick a length and the characters to use, or switch to a passphrase and pick how many words.
Press New password. Each one is drawn fresh from your device's cryptographic generator.
Copy it straight into the account and keep it in a password manager, never in a note or a message.
Want this done for you, every week?
Runner gives growth a whole team: it finds the leads, sends each one your introduction, and drafts the posts and ads. You set the number it works toward.
Build my teamQuestions about the Password Generator
Is the password sent anywhere?
No. It is made in your browser and shown to you, and that is the whole journey: no network call, nothing stored, nothing logged, nothing in the page's address. Once the page has loaded, it works with the connection off.
How is it random?
Every character is drawn from your device's cryptographic random number generator — the one the Web Crypto standard provides for keys — with rejection sampling, so each allowed character is exactly equally likely. Nothing is based on the clock or on a formula someone could replay.
Password or passphrase?
A password for accounts a manager fills for you: at the default 20 characters it carries more randomness than anything you would memorise. A passphrase for the few secrets you type or say out loud — the words come from the EFF's published 7,776-word list, and six of them are drawn with about 78 bits of randomness.
What do the bits mean?
Bits count how many equally likely values the generator could have produced: each bit doubles them. The readout is exact arithmetic — the number of allowed characters, and how many are drawn — not a grade, and it changes as you move the toggles so you can see what each choice costs.
Why exclude look-alikes?
Capital i, lowercase L and the digit one read the same in many faces, as do o, zero and capital o. Turn the option on for a password someone will read from paper or a screen; leave it off for one a manager fills, since removing characters slightly lowers the randomness, and the readout shows by how much.
Is there a rule like one digit and one symbol?
No, by design. A composition rule makes some combinations impossible, which lowers the real randomness while the readout would still claim the full amount. Where a site demands a digit or a symbol, leave those sets on and generate again until one lands — at 20 characters that is almost always the first try.
Does it cost anything?
No. There's no account and nothing to sign up for.