Password Generator
Generate strong, random passwords using your browser's cryptographic RNG. Nothing is ever sent anywhere.
Why does length matter more than symbols? Read: How to Generate a Strong Password
Curious how long it'd actually take to crack? Read: How Long Would It Take to Crack Your Password?
How it works
Passwords are generated using crypto.getRandomValues(), the same cryptographically secure randomness source used for real encryption keys — not Math.random(), which isn't secure enough for this — and the result never leaves your browser.
When you’d use this
- Creating a new password for an account, prioritizing length over complexity for real strength
- Generating a master password for a password manager
- Producing a batch of random values for testing or seeding test accounts
Common questions
Are these passwords actually random, or just look random?+
They use crypto.getRandomValues(), the browser's built-in cryptographically secure random number generator — the same class of randomness used for encryption keys. This is meaningfully stronger than Math.random(), which many simpler generators use and which isn't safe for security purposes.
Are generated passwords stored or sent anywhere?+
No. Generation happens entirely in your browser and nothing is transmitted or logged. Each password only exists in your browser tab until you copy it or leave the page.
What length should I actually use?+
16 characters with all character sets enabled is a solid default for most accounts. For anything highly sensitive (password manager master password, crypto wallet), 20+ characters is safer. Length matters more than complexity — a longer password with fewer symbol requirements is often stronger than a short one packed with special characters.
Why exclude ambiguous characters?+
Characters like l, 1, I, O, and 0 can look identical in many fonts, which causes real mistakes when manually typing a password (like reading it off a screen to type into a phone). This only matters if you're not using copy-paste — if you always copy the password, it's unnecessary.
Should I use the same generated password everywhere?+
No — reusing any password across multiple accounts means one breach exposes all of them. Generate a unique password per account and use a password manager to store them, rather than trying to remember them.