Password Generators Compared: 6 Free Tools and Where the Password Is Made
Every tool in this comparison can produce a random-looking password. That does not make the six workflows identical. The useful differences appear before and after the string is created: where generation runs, whether that claim is documented, and where the result goes next.
This article includes the free Built by mePassword Generator. It runs in the browser and is built for standalone passwords, passphrases, and PINs. That disclosure matters, and it does not make the tool the automatic winner. A generator inside your existing password manager may remove more manual steps.
One caveat about the evidence column, stated up front: for the five tools I did not build, it records what the vendor documents, not what I measured. "Not stated" means the first-party pages do not answer the question — it is not a finding against the product. The only generator I opened the network tab on is my own.
The comparison uses current public tools and first-party documentation. It describes product behaviour rather than giving security advice. For other decision-led reviews, see Tools & Guides.
Password Generator
The Built by mePassword Generator is the focused standalone option in this list. I built it for moments when you need a result without first choosing a vault, creating an account, or installing an extension.
Nikita's own tool. No account, upload, or generation quota.
Its clearest distinction is the documented execution model: passwords, passphrases, and PINs are generated locally in your browser. The generated value is not uploaded for a server to create it. There is no account and no generation quota. Writing this comparison, I checked that claim the boring way — with the network tab open, generating and regenerating produced no request at all.
The important limit is equally visible. Browser-local generation is a narrow technical fact, not a blanket promise about the device, browser, clipboard, extensions, or anything you do afterwards. It tells you how the value is created, not that every surrounding step is risk-free.
The tool also separates three jobs that other free pages often combine poorly. You can create a conventional random password, a word-based passphrase, or a PIN, then adjust the settings that apply to that output type.
Two practical details do not fit in the table. It generates 1, 5, 10, 25, or 50 values in one pass, which is the difference between a one-account job and seeding a set of service accounts in one sitting — none of the other free pages here offer that. And its filters go past the usual character toggles: exclude similar characters, exclude ambiguous symbols, avoid repeating characters, avoid sequential patterns. The result carries a strength rating and an estimated crack time.
The trade-off is equally clear: there is no vault. The tool can create and copy the result, but it will not automatically attach that result to the correct login or fill it later. Use it when standalone generation is the job; use an integrated manager when saving is part of the job.
Bitwarden
Bitwarden is the strongest all-round comparison point because it offers both a public generator and generators inside its apps, browser extension, web vault, and command-line tool.
Independent link. No affiliate relationship, no referral tracking.
Its public documentation is unusually direct about location. Bitwarden says generated passwords are made locally on the device, do not travel across the internet, and are not stored on Bitwarden servers. The public generator works without an account.
The controls cover random passwords and passphrases. The installed clients add the practical part a standalone page cannot provide: generate beside the login, save the value to the vault, and autofill it later.
There is a detail worth noticing. Bitwarden documents a generator history for some clients, even when a generated value is not saved as a login; that history is tied to the specific client and cleared when you log out. Local generation therefore does not mean 'nothing retains the result anywhere'. Product behaviour after generation still matters.
For an existing Bitwarden user, the integrated generator is usually the tidiest workflow here. For everyone else, the public page remains a credible no-account option because its local-generation claim is explicit rather than implied.
1Password
1Password offers two related experiences. Its public website generator is available without an account, while the installed app and browser extension connect generation to saving and autofill.
Independent link. No affiliate relationship, no referral tracking.
The public tool has a useful range: Random, Memorable, and PIN modes. That makes it one of only two options in this comparison that visibly covers all three output families from a free web page.
For subscribers, the extension is the real operational advantage. You can open the generator from a password field, adjust the settings, fill the result, and update the matching login. The app also keeps generator history, which can rescue a value created moments earlier but not saved correctly.
The evidence boundary needs plain wording. The reviewed first-party pages explain where the generator appears and how it saves, but they do not explicitly state that the public web-page result is generated entirely on-device and never transmitted. That is not evidence that it goes to a server; it is simply a claim this comparison cannot confirm.
Choose 1Password when it is already your system of record for logins. Its biggest benefit is not the free webpage. It is the shorter path between creating a value, attaching it to the right account, and using it again.
Google Chrome
Chrome is the low-friction option because the generator appears where the work is already happening: inside a password field on a sign-up or password-change page.
Independent link. No affiliate relationship, no referral tracking.
The workflow is short. Select the suggested password, accept it, and finish the form. Google's documentation says the accepted password is then automatically saved to your Google Account.
That last step is the important distinction. A reader may ask where the password is made, but Chrome's documented workflow immediately answers a second question: where does it go? Generation and account storage are joined by default.
Chrome gives you fewer visible controls than the dedicated tools. It does not present the same choose-your-length, switch-character-sets interface, nor a visible passphrase or PIN mode in the standard sign-up flow.
Use it when you are signed into Chrome, want a conventional suggested password, and are happy for Google Password Manager to store it. It is less suitable when you need a standalone result, a passphrase, a PIN, or detailed generation settings.
LastPass Online Generator
The LastPass online generator is a conventional public web tool: open the page, choose a length and character options, generate, then copy the result.
Independent link. No affiliate relationship, no referral tracking.
It exposes uppercase, lowercase, numbers, and symbols, plus options intended to make a result easier to say or read. The free page does not require a LastPass account for that copy-and-paste workflow.
LastPass says its online and in-app generators provide the same generation functionality. The difference is what follows: the installed product can autofill and save, while the public page leaves transfer and storage to you.
The page also discusses a local-only encryption model, but that wording concerns vault data. The reviewed material does not make an equally explicit statement that the public generator's displayed password is produced entirely on-device. It would be careless to stretch one claim into the other.
This is a capable quick generator with familiar controls. Its main weakness in this particular comparison is documentation transparency: the location question is not answered as directly as it is by Bitwarden or n-g.be.
Dashlane Online Generator
Dashlane's public generator is another clean copy-and-paste option. It provides a length control and switches for letters, digits, symbols, and similar characters.
Independent link. No affiliate relationship, no referral tracking.
The similar-character setting is practical when someone may need to read or type the result manually. It can remove combinations such as zero and capital O that are easy to confuse on a call or printed handover. It is not a point of difference, though — n-g.be exposes the same control alongside three further exclusion rules.
Dashlane's installed browser extension goes further. Current support documentation says it can generate passwords and passphrases when you create or update a login, then keep that work inside the wider password-manager flow.
The public page is narrower: it presents a random password rather than the passphrase workflow documented for the app and extension. Its first-party page also does not clearly state whether the displayed web result is computed entirely on-device or by a remote service.
Use the public tool when its readability controls solve the immediate job. Existing Dashlane users will get more value from the extension, where generation, saving, and later autofill sit together.
Recommendation
Personal Recommendation
Start with the destination, not the generator. If the new credential belongs in 1Password, Bitwarden, Dashlane, or Google Password Manager, create it inside that existing workflow so saving is not a separate task.
For a standalone result, the Built by mePassword Generator is the broadest focused option here because it covers passwords, passphrases, and PINs with an explicit browser-local model. Bitwarden is the strongest alternative when you want both an explicit local-generation statement and a direct route into a vault.
The simple mental model is a key-cutting machine. Where the key is cut matters, but so does who holds it next. Local generation describes one step only; it does not turn a browser, clipboard, extension, device, or storage choice into a complete security guarantee.
