Password Generator
Generate strong, random passwords with a cryptographically secure generator.
How to use
- Pick a length (12+ recommended, 16+ for important accounts).
- Toggle the character sets to match the site's requirements.
- Click “Generate new” until you like the result, then copy it.
Frequently asked questions
Is it safe to generate passwords online?
Here, yes - the password is generated on your device with the browser's cryptographic random number generator (Web Crypto) and never transmitted anywhere.
How long should my password be?
At least 12 characters with mixed character sets; 16+ for email, banking and anything important. Length matters more than complexity.
Do you store generated passwords?
No. Nothing is stored or sent - refreshing the page destroys everything.
What makes a generated password actually secure
Two things: real randomness and length. This generator draws from your browser's cryptographically secure random source (the Web Crypto API) - the same generator used for encryption keys - not a predictable software shuffle. And it defaults to lengths where brute force stops being a conversation: every character added multiplies the attacker's work by the size of the character set.
Generation happens on your device. The password is never transmitted, logged or stored - we couldn't see it if we wanted to, and refreshing the page destroys it.
Length beats cleverness
A 16-character random password from a full character set has around 10²⁸ possibilities - checked at a trillion guesses per second, that's trillions of years. Meanwhile 'P@ssw0rd2026!' falls to a dictionary attack in minutes, because humans making passwords 'complex' all make them complex the same way. Use 12+ characters for ordinary accounts and 16-20 for email, banking and anything that can reset other passwords.
Toggle off symbol sets only when a site genuinely rejects them - and treat that as a small red flag about the site.
One password per site, always
The most common way accounts get broken isn't cracking - it's credential stuffing: a password leaked from one breached site gets tried on every other site you use. Unique passwords make a breach a contained incident instead of a cascade. Since nobody memorises fifty random strings, pair this generator with a password manager, or use it to create the handful of high-value passwords you type by hand. Curious how strong your current password is? Our Password Strength Checker estimates crack time locally, without your password leaving the page.