Password Generator

What makes a password strong

Strength comes from length and randomness, not clever substitutions like "P@ssw0rd". A random 16-character password mixing upper and lower case, digits, and symbols has so many possible combinations that guessing it by brute force is impractical. The weak part of most passwords is that a human chose them — birthdays, pet names, and keyboard walks like "qwerty" are the first things cracking tools try. This generator removes the human pattern entirely by pulling each character from your browser's cryptographic random number generator (crypto.getRandomValues), the same source used for encryption keys.

When you'd reach for this

Use it whenever a site asks you to create a new account, when you're rotating an old password after a breach notice, or when you're setting up a database, API key, or Wi-Fi passphrase. A common workflow: generate a long unique password here, then paste it straight into your password manager so you never have to type or remember it. Because every account gets its own random string, a leak at one site can't unlock the others.

A few practical tips. Aim for at least 16 characters for anything that matters; go to 20 or more for email and banking, since those are the accounts attackers want most. If a site rejects symbols (some banks still do), regenerate with symbols turned off rather than hand-editing the result. And treat length as your main lever — adding characters strengthens a password far faster than adding one more symbol type.

How to use it

1. Set the length with the slider or number field — 16 is a solid default, higher for critical logins.
2. Toggle which character sets to include: uppercase, lowercase, numbers, and symbols. Leave them all on unless a site forbids one.
3. Click Generate. A fresh password appears; press it again as many times as you like until you get one you're happy with.
4. Use the copy button to send it to your clipboard, then paste it into the signup form or your password manager.

FAQ

Does the password ever get sent anywhere?

No. Generation happens entirely in your browser using its built-in crypto RNG — nothing is uploaded, logged, or seen by us.

Are these passwords truly random?

They're drawn from crypto.getRandomValues, a cryptographically secure source, not the ordinary Math.random. That makes each character unpredictable and safe for real accounts.

How long should my password be?

16 characters is a good baseline. For email, banking, and password-manager master passwords, go 20 or longer. Length matters more than exotic symbols.

Is this free?

Yes, it's completely free and supported by the ads on the page. There's no signup and no limit on how many passwords you generate.