Password Generator
Create a strong random password with the exact length and characters you need.
Options
Processed on your device — nothing is sent anywhere.
How it works
- Set the password length with the slider and pick which character types to include.
- A new password is generated instantly whenever you change a setting.
- Click the password or the Copy button to copy it, or press Regenerate for a new one.
Frequently asked questions
- How random are the generated passwords?
- Passwords are built with the Web Crypto API (crypto.getRandomValues), which draws from your operating system’s cryptographically secure random number generator. Rejection sampling is used so every character is picked with equal probability, avoiding the bias that simple modulo methods introduce.
- Is my password sent to a server?
- No. The generator runs entirely in your browser and never makes a network request. The password exists only on your device until you copy it somewhere yourself.
- How long should a password be?
- For anything important, aim for at least 16 random characters; 20 or more is better for email, banking and password-manager master passwords. Each extra character multiplies the number of possible passwords, so length adds far more strength than swapping letters for symbols. A long random password from this tool is impractical to brute-force with current hardware.
- Should I use a different password for every account?
- Yes. Reusing a password means one leaked site exposes every account that shares it, which is exactly what credential-stuffing attacks exploit. Generate a unique password per account and store them in a password manager, so you only ever memorize one strong master password.
- What does the exclude ambiguous option do?
- It removes characters that are easy to confuse when read or typed by hand: the digit 0 and letter O, and the digit 1 with lowercase l and uppercase I. This is useful for passwords that may be read aloud or entered manually, at a tiny cost in entropy.
About this tool
This password generator produces strong random passwords to whatever recipe you need: choose a length from short PINs up to very long passphrase-strength strings, and toggle lowercase letters, uppercase letters, digits and symbols independently. The result updates the instant you change a setting, so you can see exactly what a 12-character letters-only password looks like versus a 24-character everything-included one.
Generation happens entirely in your browser. The tool calls crypto.getRandomValues from the Web Crypto API — the same operating-system randomness browsers rely on for TLS keys — and applies rejection sampling so every allowed character has an exactly equal chance of being chosen. No network request is made at any point; you can open the page, disconnect from the internet, and it will keep generating. The password never exists anywhere except your screen and clipboard.
Typical uses include creating a unique password when signing up for a new site, rotating a password after a breach notification, generating Wi-Fi keys for a router, and producing one-off credentials for test accounts or shared devices. Because you control the character sets, it also handles awkward legacy systems: if a site forbids symbols or caps length at 12, adjust the toggles and slider to match its rules.
Two habits make generated passwords practical. First, pair the generator with a password manager — paste each new password straight into the manager so you never need to remember or retype it. Second, prefer length over complexity when a site allows it: a 20-character password of mixed letters and digits is stronger than an 8-character one packed with symbols. Enable the exclude-ambiguous option for anything you may have to read aloud or type from paper.