Password Generator
Generate strong, random passwords instantly in your browser using a cryptographically secure random source.
Click Generate New to create a password.
How to use this tool
A password generator creates random strings that are much harder to guess or crack than anything a person would typically choose themselves — people tend toward predictable patterns (names, dates, keyboard walks) even when trying to be random, while a generator like this one picks every character independently and uniformly from your chosen character set. Use it whenever you need a new password or API key for an account, a Wi-Fi network, or a secrets file — anywhere a strong, unique credential matters.
For example, with length 16 and all four character types enabled, this tool might generate something like xQ7!mK2$pL9@vR4w.
Drag the length slider, choose which character types to include, set how many passwords you want (1-20), and click Generate New. Click Copy next to any password to copy it to your clipboard, or Copy All to copy the whole batch at once.
FAQ
Is this password generator free to use?
Yes, this tool is completely free to use with no limits on how often you can use it.
Are generated passwords sent anywhere or stored?
No. Every password is generated directly in your browser using the Web Crypto API and is never transmitted, logged, or stored anywhere — including by this site. Closing or refreshing the page discards them for good, so save any password you want to keep before you leave.
Is this actually secure, or just a random-looking string?
It's genuinely secure. Passwords are generated with crypto.getRandomValues(), the Web Crypto API's cryptographically secure random number source — not Math.random(), which is fast but predictable and unsuitable for anything security-related. Each character is chosen uniformly at random, with rejection sampling used to avoid the subtle bias plain modulo arithmetic can introduce.
How long should my password be?
Longer is stronger — each extra character multiplies the number of guesses an attacker needs to try. Most security guidance now recommends at least 16 characters for important accounts, with all four character types (uppercase, lowercase, numbers, symbols) enabled where the site allows it. Use a password manager so you never have to remember them.