What this tool does
This password generator builds a random password from the character sets you choose. It uses your browser’s cryptographically secure random number generator (crypto.getRandomValues), which is designed for security-sensitive values — not the weaker Math.random(). Everything happens locally in your browser, so the password is never transmitted or stored anywhere.
Example
With length 16 and all character types enabled, you might get a password like k7$Rm2!qZ9vEwX#4. Each time you click Generate, a completely new random password is produced.
How to choose a good password
- Longer is stronger. Length matters more than complexity. Aim for at least 16 characters for important accounts.
- Use a password manager. Generate a unique random password for every site and let the manager remember it.
- Never reuse passwords. If one site is breached, reused passwords expose every other account.
- Enable two-factor authentication (2FA) wherever possible for an extra layer of protection.
Limitations
- Some websites restrict which symbols are allowed or cap the maximum length. If a password is rejected, try disabling symbols or lowering the length.
- A random password is only as safe as where you store it. Avoid writing it in plain text files or unencrypted notes.
- This tool does not check whether a password has appeared in a known data breach.
How to fix common problems
- “Password contains invalid characters”: uncheck Symbols, or enable Exclude ambiguous characters.
- Hard to type on mobile: try the Password Strength Estimator with a long passphrase instead.
- Need many at once: generate repeatedly, or request a bulk generator (coming soon).
Privacy: This generator runs entirely in your browser. No password you create here is ever sent over the network.