Password Generator
Create strong, random passwords using your browser's built-in secure random number generator. Nothing is ever transmitted or stored.
How to use the password generator
Choose a length and which character types to include, then click "Generate new password." A new random password is created instantly using your browser's cryptographically secure random number generator (crypto.getRandomValues), not a predictable pseudo-random function — and it never leaves your device.
What makes a password strong
Length matters more than complexity
A longer password is exponentially harder to brute-force than a short one stuffed with symbols. Aim for at least 12–16 characters where the account allows it.
Use a mix of character types
Combining uppercase, lowercase, numbers and symbols increases the pool of possible characters at each position, making guessing attacks slower.
Never reuse passwords
A unique password per account means a breach at one site can't be used to break into your other accounts.
Use a password manager
Generated passwords like these are meant to be stored in a password manager, not memorized or reused across sites.
Frequently asked questions
Is this password sent to your server?
No. Generation happens entirely in your browser using JavaScript's crypto.getRandomValues API. We never see, log or transmit the password you generate.
What does "exclude ambiguous characters" do?
It removes characters that are easy to misread or mistype, like lowercase "l", the number "1", uppercase "I", uppercase "O" and the number "0" — useful if you'll be typing the password by hand rather than copy-pasting.
How is password strength calculated on this page?
The strength meter is a rough estimate based on password length and the number of distinct character types used. It's a guide, not a guarantee — the underlying randomness is what actually determines real-world security.