Password Generator
Generate strong random passwords with configurable length and character sets, using your browser's secure RNG.
A strong password is long, random, and unique per site. Length matters more than clever substitutions—each added character multiplies the work an attacker must do exponentially.
This tool uses crypto.getRandomValues, not Math.random, so the output is drawn from the operating system's CSPRNG and is safe to use for real credentials.
Length beats complexity: a 16-character random password from a 70-character alphabet has about 100 bits of entropy, far beyond brute-force reach.
Common uses
- Creating a unique password for a new account instead of reusing an existing one.
- Generating API keys, tokens, or shared secrets for development and testing.
Frequently asked questions
- How long should a password be?
- At least 12-16 characters for most accounts. A 16-character random password from a 70-character alphabet has about 100 bits of entropy, which is beyond brute-force reach.
- Are generated passwords safe to use here?
- Yes. Generation happens entirely in your browser and nothing is transmitted. For maximum safety, store the result in a password manager.
- Should I include symbols?
- Symbols increase the alphabet size, but length has a bigger effect. If a site disallows symbols, a longer letters-and-digits password is usually stronger anyway.
- Are symbols always better?
- Not necessarily. A 20-character letters-and-digits password is stronger than a 12-character one with symbols. Length wins.
- Should I write it down?
- No. Use a password manager to store the generated value; writing it on paper or in a note defeats the purpose of a random password.