12 Character Password Generator
Generate random 12-character passwords — the recommended minimum for most accounts. Cryptographically secure, browser-based, and completely private.
NIST recommends: 12 characters is the recommended minimum for standard accounts. It provides strong protection for most everyday security needs.
Generated using crypto.getRandomValues() — never stored or transmitted.
Why 12 characters is the recommended minimum
A 12-character password using all four character types (uppercase, lowercase, digits, symbols) has approximately 78 bits of entropy. Against a GPU-accelerated offline attack at 10 billion guesses per second, this would take over 3,000 years to crack — well beyond any practical attack scenario.
NIST Special Publication 800-63B recommends a minimum of 8 characters for user-chosen passwords, but the security research community broadly agrees that 12 characters provides a more comfortable real-world margin. Many enterprise security policies and leading password managers recommend 12 as their minimum.
12-character passwords are a solid choice for: social media accounts, streaming services, e-commerce sites, forum logins, and other accounts where the risk is moderate. For high-value accounts (email, banking, password managers), consider stepping up to 16 characters for additional security headroom.