Password Generator
Create a strong random password. Choose the length and character types; generation happens in your browser.
Loading…
About the Password Generator
This tool builds random passwords from the character sets you enable: lowercase letters, uppercase letters, digits and symbols. Each character is drawn from your browser's cryptographic random source (crypto.getRandomValues), which is far less predictable than the ordinary Math.random used by many simple generators. Longer passwords with a wider mix of characters take dramatically longer to crack by brute force.
How to use it
- Set the length - 16 or more characters is a sensible default for accounts you care about.
- Tick the character types you want: lowercase, uppercase, numbers and symbols.
- Generate, then copy the password with one click and paste it into your password manager.
A practical tip: store the result in a password manager rather than memorising it, and use a unique password per site so one breach cannot unlock the rest. Note that some sites reject certain symbols, so you may need to turn symbols off for those. Because everything runs locally, your generated password is never transmitted or saved anywhere - it exists only in your browser until you copy it.
Frequently asked questions
Are the passwords generated here secure?
Yes. Each character is chosen using your browser's crypto.getRandomValues API, a cryptographically secure random source, so the output is unpredictable. Security in practice depends mostly on length and character variety - a 16+ character password mixing letters, numbers and symbols is very strong.
Is my password sent to a server?
No. The password is generated entirely in your browser using local JavaScript. Nothing is uploaded, logged or stored on any server, so the only copy is the one in front of you.
How long should my password be?
Use at least 12 characters for ordinary accounts and 16 or more for important ones like email, banking or your password manager. Each extra character multiplies the number of possible combinations an attacker must try.
Why does the password include symbols I cannot use on some sites?
Some sites restrict which symbols are allowed. If a password is rejected, turn off the symbols option and generate again, or increase the length to keep the password strong without special characters.