Skip to content
You're offline. Some features may not work.

Strong Passwords, Instantly.

Generation stays on this device.

Client-side only Web Crypto API No secret transmission
Loading…

Presets

4128

Character composition (minimum count)

Uppercase
2
Lowercase
2
Digits
2
Symbols
2
Ctrl/⌘ + G Generate Ctrl/⌘ + Shift + C Copy

How to generate a secure password

  1. Open Password Generator

    Go to password-generator.hanoon.app in your browser.

  2. Set your preferences

    Choose the password length and select which character types to include (uppercase, lowercase, numbers, symbols).

  3. Copy your password

    A strong password is generated instantly. Click the copy button to copy it to your clipboard.

Is the password generated securely?

Yes. Hanoon Password Generator uses the Web Crypto API built into your browser to produce cryptographically secure random values. No custom or weak random number generator is used. If Web Crypto is unavailable or fails, generation stops.

Are my passwords sent to a server?

No. Generated secrets are not sent to or persisted by Hanoon. Up to 20 can remain temporarily in page memory, and copying writes to your device clipboard.

Is this tool really free?

Yes. Hanoon Password Generator is completely free with no ads, no account required, and no usage limits.

What makes a strong password?

Use a long, random password that is unique to each account. Sixteen characters is a practical starting point; follow the site’s length and character limits. Save it in a password manager and enable multi-factor authentication (MFA) when available.

How are passphrases generated?

Each word is chosen randomly from a list of 910 English words, so words may repeat. The default 5-word passphrase has about 49.1 bits of entropy. Separators and capitalizing words do not add randomness.

What do PINs and strength estimates mean?

A 6-digit PIN has 1,000,000 possible values (about 19.9 bits), so it does not replace a long account password. The displayed strength is estimated from your generation settings; it does not check leaked-password databases or guarantee security.