Password Generator

Create strong, random passwords using your browser's secure randomness — nothing is generated on a server.

Password Generator

click Generate

🔒 Nothing you enter is sent anywhere or stored. All processing happens in your browser.

Features

Strong, random passwords

Create hard-to-guess passwords using a cryptographically-secure random source — not predictable patterns.

Fully adjustable

Set the length and choose uppercase, lowercase, numbers and symbols to match any site's rules.

Live strength meter

See how strong each password is as you adjust the options.

Never leaves your browser

Passwords are generated locally and never transmitted or stored.

How it works — in four simple steps

No signup, nothing to install — it all runs in your browser.

Step 01

Set the length

Choose how long the password should be — longer is stronger.

Step 02

Pick character types

Turn on uppercase, lowercase, numbers and symbols as the site allows.

Step 03

Generate

A secure random password appears instantly; regenerate until you're happy.

Step 04

Copy

Copy it to your clipboard and paste it into the sign-up or password field.

How it works

This generator builds passwords from character sets you choose — uppercase, lowercase, numbers, and symbols — using crypto.getRandomValues, the browser's cryptographically secure random number source. That's important: ordinary Math.random() is predictable enough to be unsafe for secrets, while the crypto API is designed for exactly this purpose.

The length slider ranges from 8 to 64 characters. Length is the single biggest factor in password strength — each extra character multiplies the number of possible combinations far more than adding another symbol type does. The optional exclude ambiguous setting removes look-alike characters (O, 0, l, 1, I) so passwords are easier to read and type by hand.

The strength meter estimates entropy in bits, calculated as length × log₂(pool size). Roughly, under 40 bits is weak, 70+ is strong, and 100+ is very strong. Because generation happens entirely in your browser and nothing is transmitted or stored, the password you see is yours alone — copy it straight into your password manager.

Examples

16 characters, all sets → around 100+ bits of entropy (very strong).
Exclude ambiguous → no O/0 or l/1 confusion when typing.
Longer beats fancier: a 24-char lowercase phrase can outscore an 8-char mixed one.

Frequently asked questions

Are these passwords truly random and safe?
They use crypto.getRandomValues, the browser's cryptographically secure random source — appropriate for generating secrets, unlike ordinary Math.random().
Is the password sent anywhere?
No. It's generated in your browser and never transmitted or logged. Even the copy action stays on your device.
What makes a password strong?
Primarily length, then variety of character types. Every extra character adds far more resistance to guessing than a slightly larger symbol set does. Aim for 16+ characters.
Should I reuse a generated password?
No. Use a unique password for every account and store them in a password manager so you never have to remember or reuse them.