How to use the password generator
- Drag the length slider to choose a password between 8 and 64 characters. Longer is stronger.
- Check or uncheck the character sets — uppercase letters, lowercase letters, numbers and symbols.
- Click Generate password to create a fresh, random password.
- Read the strength hint and copy the password into your password manager or account form.
How the randomness works
This tool uses the browser's cryptographic random number generator, crypto.getRandomValues, rather than the ordinary Math.random that most quick password scripts use. Math.random is not designed for security — it is predictable enough that a determined attacker can narrow down the possible values. The cryptographic generator is seeded from a source of genuine entropy supplied by your operating system, which makes the output suitable for real passwords.
The generator also uses rejection sampling when picking each character. This avoids the subtle bias that appears when a naive script reduces a large random number into a smaller range with a modulo operation, ensuring every character is equally likely to be chosen.
What makes a password strong
Password strength comes from two things: length and variety. Every additional character multiplies the number of possible passwords, so a 16-character password is vastly harder to guess than an 8-character one. Using several character sets — especially symbols — multiplies the possibilities further. The strength hint below the password estimates the entropy based on both factors.
- 8–10 characters, one or two sets: weak — easy for automated guessing.
- 12–16 characters, mixed sets: strong — practical for most accounts.
- 20+ characters, all four sets: very strong — appropriate for master passwords and high-value accounts.
Privacy you can trust
Because the entire generator runs in your browser, the passwords you create are never sent to a server, logged, or stored. You can generate passwords for sensitive accounts without worrying about where they might end up.