Password Generator
A strong password is long, random, and drawn from a wide character set — not a word, a name, or anything memorable, since those are exactly what attackers try first. This tool generates truly random passwords using your browser's cryptographic random number generator and shows an estimated strength for the options you pick.
Select at least one character set below.
How to use
- Pick a length (16+ recommended) and which character sets to include.
- A new password generates automatically as you change the options.
- Check the strength indicator, then copy the result.
- Nothing is sent anywhere — generation happens entirely in your browser.
FAQ
How is the strength estimated?
From the character set size and length: strength (in bits of entropy) = length × log2(character set size). More characters allowed and a longer password both increase it.
Is this actually random, not just Math.random()?
Yes — it uses the Web Crypto API (crypto.getRandomValues), the same cryptographically-secure source used for encryption keys, not the weaker Math.random().
Should I reuse a generated password across sites?
No — use a unique password per site (ideally saved in a password manager). Reusing passwords means one breached site can compromise your accounts everywhere else.