All Tools

Password Generator

Generate cryptographically secure passwords using your browser's built-in crypto API.

✓ Uses crypto.getRandomValues — cryptographically secure. ✓ Nothing sent to servers.

About the Password Generator

Weak, reused passwords are the single most common cause of account breaches. A strong password is long, random and unique to each account — which is exactly what this generator creates. It uses the browser's cryptographically secure random number generator, not a predictable pseudo-random shortcut, so every password is genuinely hard to guess.

You control the length and which character types to include: uppercase, lowercase, numbers and symbols. The password is generated on your device and is never transmitted or logged anywhere.

How to use it

  1. 1Set the desired password length — 16 characters or more is recommended for important accounts.
  2. 2Toggle which character types to include: uppercase, lowercase, numbers and symbols.
  3. 3Generate a password; click again to get a fresh one until you're happy.
  4. 4Copy the password to your clipboard.
  5. 5Paste it into your password manager or the account's password field, then store it safely.

Common uses

  • Creating a unique password for a new online account.
  • Replacing a weak or reused password after a breach notification.
  • Generating Wi-Fi passphrases or device PINs.
  • Producing random API keys or seed values for testing.
  • Setting strong passwords for family members or team members.

Tips & good to know

  • Use a different password for every account — a password manager makes this effortless.
  • Longer beats complex: a 20-character password is far stronger than a short one full of symbols.
  • Enable two-factor authentication wherever it's offered for an extra layer of protection.

Frequently asked questions

Are the passwords really random?
Yes. They're generated with the browser's crypto.getRandomValues, a cryptographically secure source, not a simple predictable random function.
Is the generated password sent anywhere?
No. Generation happens entirely in your browser and nothing is stored, logged or transmitted.
How long should my password be?
At least 16 characters for important accounts. Longer is stronger, so go higher when the site allows it.