Password Generator

Strong, random, and never leaves your browser. Set the rules, copy, done.

 

How to choose a strong password

  • Length beats complexity. A 20-character password of only lowercase letters is harder to crack than an 8-character one with every symbol type. Start at 16+.
  • Uniqueness is non-negotiable. One password per account. A breach on one site should never endanger another.
  • Let a manager remember them. You cannot memorize dozens of random strings — that is what password managers are for. Generate, save, forget.
  • Turn on 2FA wherever it is offered. Even a perfect password is stronger with a second factor.

Why "in your browser" matters

A password you generate on a website is only as trustworthy as that site's handling of it. This tool never transmits the password anywhere — generation happens locally with your browser's cryptographic random source, the same one used for encryption keys. Need to check text length or case elsewhere? See the character counter and case converter.

Frequently Asked Questions

Is this password generator safe to use?

Yes. Passwords are generated entirely in your browser using the cryptographically secure crypto.getRandomValues() function. Nothing is sent to any server, logged, or stored — close the tab and the password is gone.

What makes a strong password?

Length matters most: aim for 16 characters or more. Mixing uppercase, lowercase, numbers and symbols increases the possible combinations, but a longer password beats a short complex one. The strength meter above reflects both.

Should I use a different password for every account?

Yes — reusing passwords means one leaked site exposes all your accounts. Generate a unique password per site and store them in a password manager so you do not have to remember them.

What does "avoid ambiguous characters" do?

It excludes characters that look alike — like 0/O and 1/l/I — so the password is easier to read and type correctly from a screen or paper without mistakes.