Password Generator
Generate a strong random password of any length, choosing which character types to include. Randomness comes from your browser's cryptographic generator rather than an ordinary random function, and the password is created on your device — it is never transmitted, logged or stored anywhere.
How to generate a password
- Choose a length — longer is generally safer.
- Pick which character types to include.
- Tap Copy, or Generate for a fresh one.
When you'd use this
- New accounts — A unique password for each service, which is the single most effective security habit there is.
- Replacing a reused password — Anywhere the same password has been used more than once.
- After a breach — Replacing a password that appeared in a leak.
- Wi-Fi and shared systems — A strong key for a router or a shared device.
Good to know
- Length beats complexity — Adding characters strengthens a password far more than adding symbol types. Sixteen characters is a sensible floor for anything that matters.
- Cryptographic randomness — Characters come from the browser's crypto generator, which is designed to be unpredictable — not from an ordinary random function.
- Nothing is sent or saved — The password is generated in your browser and never leaves it. Nothing is logged, stored or transmitted, which is exactly what you should demand of any password tool.
- Use a password manager — A generated password is only useful if you do not have to remember it. A manager removes the temptation to reuse or simplify.
Frequently asked questions
Does this password ever leave my device?
No. The password is generated and shown entirely in your browser using the Web Crypto API's random number generator. Nothing is sent anywhere, logged, or stored — refresh the page and it's gone for good.
How random is it really?
It uses crypto.getRandomValues(), the browser's cryptographically secure random number source — the same kind of randomness used to generate encryption keys, not the weaker Math.random() many simple generators use.
How long should my password be?
Longer is generally safer. 12–16 characters with a mix of upper case, lower case, numbers and symbols is a reasonable default for most accounts; use the maximum length a site allows where it really matters, like your email or password manager's master password.
Is it safe to generate a password on a website?
It depends entirely on where the generation happens. Here it happens in your browser using its cryptographic generator, and nothing is transmitted — you can disconnect from the internet and the tool still works, which is a reasonable test to apply to any such page.
How long should a password be?
Sixteen characters is a good baseline and the default here. For an email account or anything financial, longer is better, since every extra character multiplies the effort needed to crack it.
Should I include symbols?
They help, but not as much as length does. A long password of letters and numbers usually beats a short one packed with symbols, and it is easier to type on a phone if you ever have to.