Password Generator
Generate secure random passwords locally in your browser with custom length and character sets.
Password Generator online
Create strong, random passwords with the length and character sets you choose. Generation happens entirely on your device with the browser's cryptographic random number generator — nothing is sent anywhere.
How it works
For every password, the tool draws random values from crypto.getRandomValues, the browser's cryptographically secure random source, and maps them onto the character sets you enabled — lowercase, uppercase, digits and symbols. Every position is independent and uniform, so a password's strength is its entropy: length × log2(set size). A 16-character password drawn from the full 94-character printable set carries about 105 bits of entropy (16 × log2 94); 12 characters from letters and digits alone (62 characters) still gives about 71 bits. Length beats cleverness: adding four characters grows the search space far more than swapping one letter for a symbol.
Worked example
Set the length to 16, enable all four character sets and generate 5 passwords: you get 5 independent strings, each with roughly 105 bits of entropy. An attacker testing a trillion guesses per second would need over a trillion years to try every combination — so for a password like this, the realistic risks are reuse across sites and phishing, not guessing. That is why each account needs its own generated password.
How to use this tool
- Set the length — 16 or more is a good default — and tick the character sets to include.
- Choose how many passwords to generate.
- Click generate, then copy the password you want. Generate a fresh one for every account.
Common uses
Use it for new account passwords stored in a password manager, for router and Wi-Fi keys (WPA2/WPA3 accepts 8–63 characters), for server and database credentials, and for API secrets. It is also handy for temporary passwords you hand to someone else, provided they are changed on first login.
Privacy and browser processing
Passwords are generated locally with your browser's secure random generator and are never transmitted or stored.
Frequently asked questions
Are the generated passwords stored or sent anywhere?
No. They are created in your browser with its cryptographic random generator and exist only on this page until you copy them. Refresh or close the tab and they are gone — save the ones you adopt in a password manager.
How long should my password be?
At least 16 characters for important accounts, and unique for every service. Length matters more than complexity tricks: a 20-character letters-and-digits password carries about 119 bits of entropy, stronger than a 10-character password using every symbol (about 66 bits).
Why shouldn't I reuse one strong password everywhere?
Because breaches leak passwords in bulk. One site's leak hands attackers a key they will immediately try against your email, banking and work accounts. A unique password per account confines any single leak to that one service.
Does this generate passphrases?
No — it generates random character strings, not word-based passphrases. Random strings maximise entropy per character and pair well with a password manager; passphrases are the better choice only for the few passwords you must memorise and type often, such as the manager's own master password.