Home › Tools › Password Generator
Password Generator
Create strong random passwords using your browser's cryptographic random source. Nothing is sent anywhere, nothing is logged, and nothing is stored — close the tab and the passwords are gone.
100% private — everything runs in your browser, nothing is ever uploaded.
What this tool does
A new account needs a password that is not a variation of a pet's name, and a deployment script needs a long random secret for a service account. Human-chosen passwords cluster around predictable patterns, which is exactly what automated guessing attacks exploit. This tool builds passwords from your browser's cryptographic random source, lets you choose the length and character sets, and can produce several at once when you are provisioning a batch of accounts. Sixteen characters is a sensible default; longer is better wherever the site allows it. Some sites reject symbols, so the character set choices exist to satisfy those rules without shortening the password. Nothing is logged or stored here — close the tab and the generated strings are gone, which is why the first thing to do with one is to put it in your password manager.
How to use it in three steps
- Choose the length. Sixteen characters is a good default, and go longer when the account protects something valuable or the service permits it.
- Pick the character sets you need and how many passwords to generate. If a site rejects symbols, turn them off rather than shortening the password.
- Press Generate and Copy, then save it in your password manager immediately. Do not leave the only copy sitting in a browser tab or a chat message. Generate a separate value for every account, and delete any copy left in a note or a message once it is saved.
Questions people ask
Is a longer password always better?
For random passwords, length is the main driver of strength. A 20-character random string from a reasonable character set is stronger than a short one full of symbols. Length also matters more than clever substitutions based on dictionary words.
Why does a website refuse the generated password?
Some forms ban certain symbols, disallow repeated characters or cap length. Adjust the character sets to match the site's rules instead of deleting characters by hand, which reduces randomness.
Should I reuse one generated password across several sites?
No. A leak at one service then compromises every other account sharing it. Generate a separate value per account and let a password manager keep track of them.
Should I include symbols when a site allows them?
Symbols enlarge the character set, which helps for a fixed length, but length matters more and some forms reject them. A longer password built from letters and digits is usually easier to type on a phone or a TV remote and still strong enough, so choose based on where you will enter it.
Privacy: Passwords are generated by your browser's cryptographic random source and shown only in this tab; they are never sent, logged or saved, and they disappear completely when you close the page.
How to use it
- Choose the length. Sixteen characters is a sensible default; longer is better where you can.
- Pick the character sets you need, and how many passwords to generate.
- Press Generate, then Copy. Save it into your password manager straight away.
Why it stays private
A password is only as private as the least trustworthy place it has been. Generating it in a page that makes no network requests means the only copy that has ever existed is the one in front of you. The generator also deliberately guarantees that at least one character comes from each set you select, rather than hoping the random draw covers them.
Questions
How strong are these passwords?
A 16-character password drawn from the full set of letters, digits and symbols has roughly 100 bits of entropy, which is far beyond what is feasible to brute-force. Length matters more than character variety: 20 letters-only characters beat 12 mixed characters.
Should I use a password manager?
Yes. Generated passwords are only useful if you can store and retrieve them reliably, and human memory is not up to one strong unique password per site. A password manager also removes the temptation to reuse.
What does "allow look-alike characters" change?
By default the generator omits characters that are easy to confuse when reading from a screen or a printout — 0 and O, 1 and l and I, and similar. Enabling the option puts them back, which slightly increases entropy but makes manual transcription more error-prone.