Password Generator
How to use
Creates strong random passwords that are hard to guess. You can control the length and choose which characters to include, such as uppercase letters, lowercase letters, numbers and symbols. Tick the options you want, adjust the length, and generate. The strength meter shows how secure the password is, and you can copy it in one click.
- Generating a strong Wi-Fi or admin password on the spot
- Replacing a password that may have been exposed in a data breach
- Creating unique passwords for every new account you sign up for
- Satisfying a site's complexity requirements without inventing something yourself
Where the randomness comes from, and what length buys you
This generator draws from the Web Crypto API, which is backed by the operating system's cryptographically secure random source: the same one used to generate TLS session keys. That distinction matters more than any option in the interface. The obvious alternative, Math.random, is a fast pseudo-random generator designed for simulations and shuffling; its output is predictable from a small amount of observed data, and a password generated with it is not a secret. You can verify the character of this tool directly: generate a password with the network disconnected, and it still works, because nothing is fetched and nothing is sent.
Strength is measured in entropy, which is length multiplied by the bits contributed per character. A character drawn from a 95-symbol keyboard set carries about 6.6 bits, so a 12-character password holds roughly 79 bits and a 16-character one roughly 105. Each additional character multiplies the search space; substituting "@" for "a" in a dictionary word adds almost nothing, because every cracking tool has tried that substitution since the 1990s. Length is the lever that actually moves the number.
Composition rules (one uppercase, one digit, one symbol) were written for humans choosing their own passwords, and they make a random password marginally weaker by constraining the space it is drawn from. The effect is small enough to ignore, and the rules are usually mandatory anyway, which is why the option exists here. The real risk with a strong random password is not that it will be guessed but that it will be reused or written somewhere insecure. Generate a different one per account and keep them in a password manager; that combination, rather than any particular character set, is what stops one breach from becoming several.
Free and private. Everything runs on your own device, with no account and no uploads.
Reused or weak passwords are behind most account breaches. This tool generates cryptographically strong random passwords with full control over length and character set.
At least 12-16 characters with a mix of character types is generally recommended for strong resistance to modern cracking techniques.
It is generated entirely in your browser using a secure random source, nothing is transmitted anywhere.
No, generate a unique password for every account and store them in a password manager to avoid reuse risk.
- 1
Set the length
Choose how long you want the password to be.
- 2
Pick character types
Include uppercase, lowercase, numbers and symbols as needed.
- 3
Generate and copy
Check the strength meter, then copy your new password.
- ·Avoid excluding symbols just to make typing easier, a password manager fills it in for you anyway.
- ·Aim for 16+ characters for anything protecting financial or email accounts.
- ·Never reuse a generated password across multiple sites, even if it feels wasteful to generate a new one each time.