15 Character Password Generator

Set the length slider to 15, choose random mode, keep lowercase, uppercase, digits and symbols turned on, and the generator creates a 15-character password instantly. A 15-character password using all four character types has about 98 bits of entropy, which the strength meter rates as strong. Copy it with one click or generate up to 50 at once.

Yes for almost every account. 15 random characters from letters, digits and symbols give about 98 bits of entropy. Even against an offline attacker testing 100 billion guesses per second, that is billions of years. If a site does not allow symbols, 15 letters and digits still gives about 89 bits, so consider 16 or more characters. For email, banking and your password manager master password, 20 characters is a better target.

Yes. It is completely free, with no sign-up, no email, no daily limit and no watermark. Pick a length, choose which character types to include, and copy your random password. Generate up to 50 at once if you need a batch.

Yes. A random password appears as soon as the page loads, and one click makes another. For something easier to read or type, use the Readable preset (no look-alike characters) or switch to passphrase mode, which makes passwords out of random words.

Yes, to make the password that unlocks the drive. Windows requires at least 8 characters by default and your administrator can raise that. Because a stolen drive can be attacked offline, use 15 or more characters or a passphrase of 8 or more words. The 48-digit BitLocker recovery key is created by Windows itself, so this tool cannot make it. Store that key separately from your password.

Yes. Bulk mode makes up to 50 unique passwords per batch for client accounts, local admin accounts and service accounts. Paste each into your password manager or documentation platform and delete the .txt download afterwards. Use a different password for every client and device.

Yes. Switch to PIN mode to make a numeric passcode. A 6-digit passcode has about 20 bits of entropy and an 8-digit one about 27 bits. That is low, so a PIN is only safe where the device or service limits the number of attempts, such as a phone lock screen. For anything attackable offline, use a long random password or passphrase.

Yes. Passphrase mode joins random words, like Cedar-Mango-Velvet-Lion-Pearl-Olive-Tiger-Moon. Each word is picked at random from a fixed list, so use 8 or more words for real security.

Yes. The generator uses your browser's crypto.getRandomValues() function, which is a cryptographically secure random number generator. It is the same source used by TLS certificates, banking apps and password managers. It is not Math.random(), which is predictable and unsuitable for security.

No. Generation happens entirely in your browser using JavaScript. Nothing is transmitted, logged or stored. If you close the tab, everything is gone. There is nothing on our side to leak. You can open your browser network tab and verify.

Yes, in the sense that matters for privacy: the passwords are created locally on your own device by your browser, and nothing is sent to a server. You do not need to install anything.

In random mode, yes. It picks individual characters at random, so the result contains no dictionary words and cannot be found in a wordlist attack. Only passphrase mode uses words, and it picks them randomly from a fixed list, so use 8 or more words if you choose it.

Yes. Random passwords are ideal as fake data for test accounts, demos, sample databases, tutorials and screenshots. Generate as many as you need (up to 50 per batch) and download them as a .txt file. Never use a real password in test data, and never reuse a password you generated for testing on a real account.

The tool generates passwords, passphrases and PINs, not usernames. If you need a fake or throwaway username for test data, a short random string works: pick random mode, turn symbols off and set the length to 8 to 12 characters. Then generate a separate password for the matching fake login.

The best password generator uses a cryptographically secure random source, runs on your device so nothing is uploaded, lets you choose length and character types, and does not require sign-up. ToolDeck does all of this for free, and shows live entropy so you can see exactly how strong each password is. Password managers such as Bitwarden, 1Password and KeePassXC also include strong generators and are the best place to store what you create.

15 to 16 characters is a good modern minimum for important accounts, and 20 characters is better. 12 characters of truly random mixed characters is still good, but weaker against offline attacks. For anything protecting money, email or identity, aim for 100 or more bits of entropy, which the strength meter shows. If you must type it by hand, use a passphrase of 8 or more words instead.

A passphrase is a sequence of random words joined together, like Cedar-Mango-Velvet-Lion-Pearl-Olive-Tiger-Moon. Each word is picked from a list of 256 words, so each word adds 8 bits of entropy. Five words is 40 bits, eight words is 64 bits, twelve words is 96 bits. Passphrases are much easier to remember and type than random characters, but you need more of them: a short 4 or 5 word passphrase is weaker than a 12 character random password. Use 8 or more words for real security.

Symbols add about 33% more possible characters per position, so they do increase strength. But they also make passwords harder to type on some devices and sometimes get stripped by poorly built login forms. If your account allows symbols without issue, use them. If not, compensate by making the password longer, 20 characters instead of 15.

It removes I, l, 1, O, 0 and o from the pool. These characters look nearly identical in many fonts. If you ever need to type a password from printed paper or read it aloud over the phone, this option eliminates a common source of errors. The strength loss is minimal.

It is an estimate of how long an attacker would need to brute-force the password, assuming they have the hash and can test 100 billion guesses per second, a realistic offline attack using a high-end GPU rig. It assumes they have to try half the keyspace on average. It is a comparison guide, not a guarantee, real-world attacks have different speeds.

Yes. Use the Number of passwords slider to generate up to 50 in one batch. Perfect for setting up team accounts, servers, or giving every family member a unique Wi-Fi password. Click Copy all or download the batch as a .txt file.

The .txt file is only as safe as where you store it. Do not keep it on your desktop. Move the file into an encrypted password manager (1Password, Bitwarden, KeePass) or an encrypted folder, then delete the original. The safest approach: paste each password directly into your password manager and never save the file.

No. Nothing is stored. There is no database, no log, no analytics event that captures the values. The batch you see exists only in your browser's memory until you close the tab.

Yes, strongly recommended. A password manager (Bitwarden, 1Password, KeePassXC, or the one built into your browser) lets you use a unique 20+ character password for every site without remembering any of them. You only remember one strong master password. Every security expert agrees: password managers are the single biggest security upgrade most people can make.

ToolDeck (tooldeck.online) is a free collection of browser-based tools for images, PDFs, video and developer work. Every tool runs on your device, so your files and passwords are never uploaded. No sign-up and no watermark.

Yes. Because nothing is uploaded, no audit trail or copy exists outside your browser. Generate batches of passwords for teams, print them for onboarding, or paste them into your company password manager. No sign-up required, no hidden cost, no terms of use that grant rights over the output.