12-Character Password Generator
Create a random 12-character password. The length is pre-filled, and you can still adjust it if this site allows more.
This page generates 12-character passwords, which is the common middle ground most sites cap you at. With all four character classes selected the search space is about 78 bits, and the strength meter above shows how much of that you keep after any option you turn off.
The length field starts at 12 but is not locked. Sites have different limits, and a generator that refuses to go beyond a preset number is a demo, not a tool.
How to use it
- Leave the length at 12, or change it if the site you are signing up for has a different limit.
- Untick any character class the site rejects — some still refuse symbols.
- Copy the password straight into your password manager, not into a notes app.
Why 12 characters
A 12-character password drawn from all 88 printable characters carries roughly 78 bits of entropy. Each additional character multiplies the search space by 88, which is why length matters far more than the exotic look of the symbols.
Use 12 characters for shopping accounts, streaming services and sites with a 12-character limit. Avoid it for long-lived credentials such as your password manager master password.
Reviewed 2026-10-21. This tool runs entirely in your browser — no server, no account, and nothing you generate is stored.
Frequently asked questions
Why do so many sites limit passwords to 12 characters?
Legacy database columns and old hashing pipelines. A 12-character limit is a sign the site stores passwords poorly, so treat that account as lower value and never reuse the password elsewhere.
Does a 12-character password with symbols beat a longer one without?
No. Length wins. Adding four characters multiplies the search space by 88^4 (about 60 million) while adding a symbol class only multiplies it by roughly 1.35. If a site forces you to drop symbols, add length instead.
Are these passwords generated on your server?
No. There is no server involved. The characters come from your browser's crypto.getRandomValues(), and the page never makes a network request with the result.
What if the site truncates my password silently?
A few old systems cap input at 16 or 20 characters. If you paste 12 characters and the login later fails, try logging out and back in immediately after saving — that is the only reliable way to detect truncation.
Related tools
More from Passwords.