🔑 Password Generator
Generate cryptographically random passwords with full control over length and character sets: uppercase, lowercase, numbers, and symbols.
Strength: Strong
How to Use the Password Generator
The Password Generator creates cryptographically secure random passwords directly in your browser. Use the Length slider to choose a password length from 4 to 128 characters — we recommend at least 16 characters for most accounts. Check the boxes to include Uppercase letters (A–Z), Lowercase letters (a–z), Numbers (0–9), and Symbols (!@#$%…). The more character types you enable, the stronger your password. Click Generate New Password to create a fresh password, or click the 🔄 button to regenerate. The strength meter below the password estimates strength based on length and character variety.
Click 📋 to copy the password to your clipboard. This generator uses crypto.getRandomValues() — the browser's cryptographically secure random number generator (CSPRNG) — which is far more unpredictable than Math.random(). Your generated passwords are never stored, logged, or sent to any server. Use a password manager to store your generated passwords securely.
Frequently Asked Questions
What makes a password strong?
›
Password strength comes from two factors: length and character variety. A longer password has more possible combinations, making it exponentially harder to guess. Including uppercase letters, lowercase letters, numbers, and symbols increases the pool of possible characters. A 16-character password using all four character types has over 6 × 10²⁸ possible combinations — far beyond what any current computer can brute-force.
How long should a password be?
›
Security experts recommend a minimum of 12–16 characters for important accounts. For the most sensitive accounts (email, banking, password manager master password), use 20+ characters. The NIST guidelines (SP 800-63B) now prioritize length over complexity, recommending passphrases of 4+ random words (e.g., "correct-horse-battery-staple") as an alternative to complex short passwords.
Is this password generator truly random?
›
Yes. This tool uses the Web Cryptography API's crypto.getRandomValues() function, which uses the operating system's entropy source (hardware-based random noise). This is cryptographically secure randomness, unlike Math.random() which is a pseudo-random number generator not suitable for security. Passwords generated here are suitable for use in production security applications.
Where should I store my generated passwords?
›
Use a reputable password manager such as 1Password, Bitwarden (open-source and free), KeePass, or Dashlane. A password manager stores your passwords in an encrypted vault accessible with one master password. Never store passwords in a plain text file, spreadsheet, or browser notes. Avoid reusing the same password across multiple sites.