Password Generator
Generate strong, random, cryptographically secure passwords instantly.
How it works
Weak, reused, or predictable passwords are one of the most common causes of account breaches -- and human-generated passwords are surprisingly easy to guess, even when they feel random to the person who made them. This generator produces genuinely random passwords using your browser's cryptographically secure random number generator (the Web Crypto API's crypto.getRandomValues), the same class of randomness used in security-sensitive applications.
Choose your length (4 to 64 characters) and which character sets to include -- uppercase, lowercase, numbers, and symbols. Longer passwords with more character variety are exponentially harder to crack: a 16-character password using all four character sets has a vastly larger possible combination space than an 8-character password using only lowercase letters.
Every password is generated entirely in your browser and is never transmitted anywhere or logged, so it's safe to generate passwords for real accounts here.
Frequently asked questions
Are these passwords secure?
Yes. Passwords are generated locally in your browser using the Web Crypto API's cryptographically secure random number generator, and are never sent to a server.
What length should I use?
For most accounts, 16 characters with all character types enabled gives a very strong password. For highly sensitive accounts (password managers, financial accounts), consider 20+ characters.
Should I use the same strong password everywhere?
No -- generate a unique password for every account. If one site is breached, a reused password lets attackers access your other accounts too. A password manager makes storing many unique passwords practical.
Why include symbols if some sites don't allow them?
Symbols significantly increase the possible combinations for a given length. If a site rejects symbols, simply uncheck that option and regenerate -- the remaining character sets are still cryptographically random.