Password Generator
Generate cryptographically strong passwords. Customize length and character sets. Everything happens in your browser.
About this tool
The Password Generator creates cryptographically strong random passwords right in your browser. It uses crypto.getRandomValues() — the same random number generator that powers TLS/SSL encryption — to ensure every password is truly unpredictable. No pseudo-random algorithms, no patterns an attacker could exploit.
You control length (6 to 64 characters) and character sets: uppercase (A-Z), lowercase (a-z), digits (0-9), and symbols (!@#$%^&*). A real-time strength indicator shows the entropy level of your chosen configuration, from Weak to Strong, so you understand exactly how secure your password is.
Passwords are generated locally and displayed only on your screen. Nothing is stored, logged, or transmitted. The page works fully offline after loading — you can disconnect from the internet and still generate passwords.
How to use
- Choose your length. Use the slider to set a password length. 16-20 characters is recommended for most accounts. For critical accounts (email, banking), use 24+ characters.
- Select character sets. Check or uncheck the character types to include. All four sets enabled gives the strongest passwords per character. At minimum, use lowercase, uppercase, and digits.
- Generate and copy. Click Generate to create a password. Check the strength indicator — aim for "Strong" (green). Click Copy to copy it to your clipboard, then paste it into your password manager or directly into the signup form.
Frequently asked questions
Are the generated passwords truly random?
Yes. The generator uses crypto.getRandomValues(), the browser's cryptographic-quality random number generator. This is the same RNG used by HTTPS/TLS for encrypting web traffic. It draws entropy from hardware-level sources and is not predictable like Math.random().
How long should my password be?
For online accounts, 16-20 characters with mixed character sets provides strong security (60-70+ bits of entropy). For critical accounts like email, banking, or a password manager master password, use 24+ characters. Each additional character doubles the number of possible combinations.
Are the passwords stored or logged anywhere?
No. The password is generated in your browser and displayed only on your screen. It is never stored, logged, or sent to any server. Once you navigate away or click Generate again, the previous password is gone. We recommend copying the password to a password manager immediately.
Does this work on mobile?
Yes. The Password Generator is fully responsive and works on all modern browsers including iOS Safari and Android Chrome. You can generate strong passwords directly from your phone.