Password Generator
Create strong, random passwords with cryptographic randomness. Nothing is sent anywhere — it's all generated in your browser.
About Password Generator
Password Generator creates genuinely random passwords using your browser's cryptographic random number generator — the same primitive used for encryption keys, not the predictable arithmetic behind ordinary random functions. Nothing is transmitted, logged or stored anywhere.
Human-invented passwords are far weaker than they feel. We reach for names, dates, keyboard patterns and predictable substitutions, replacing an a with an @ and a three with an E as though attackers have not encountered that before. Cracking software works through exactly these patterns first, which is why a password that felt clever can fall in seconds while a shorter random string holds out indefinitely.
Length is what actually matters. Each additional character multiplies the search space, so a long password from a small alphabet beats a short one bristling with symbols. The other half of the problem is reuse: credentials leak from breached services constantly, and attackers immediately try the same email and password everywhere else. A unique random password per site means one breach stays one breach — which in practice requires a password manager, because nobody memorises forty of these.
How to generate a strong password
- Set the length — 16 characters or more for anything that matters.
- Choose which character types to include: uppercase, lowercase, numbers and symbols.
- Generate the password.
- Copy it straight into your password manager rather than a note or a document.
- Generate a fresh one for every account instead of reusing this one.
Tips & common problems
Length beats complexity
A 20-character password of just letters is stronger than 10 characters of mixed symbols. When a site imposes a maximum length, add symbol variety to compensate.
Some sites reject certain symbols
If a password is refused, the site probably disallows particular characters. Generate one with letters and numbers only and increase the length instead.
Store it before you navigate away
Nothing is saved here. Once the page is closed the password is gone, so paste it into your manager at the moment you generate it.
Prioritise your email account
Email is the master key — anyone controlling it can reset everything else through password recovery. If you only fix one password today, fix that one.
Frequently asked questions
Are these passwords safe to use?
Yes. They are generated locally using the Web Crypto API, which is the browser's cryptographically secure randomness source, and they never leave your device or touch a network.
Can I choose which characters to include?
Yes. Toggle uppercase, lowercase, numbers and symbols independently and set any length, which lets you satisfy sites with awkward password rules.
Do you store or log the passwords?
No. Generation happens entirely in your browser, nothing is transmitted, and nothing is retained after you close the page — including by us.
How long should my password be?
At least 16 characters for important accounts, and longer where the site permits it. Every extra character makes brute-forcing exponentially harder.
Should I use a different password for every site?
Yes, and it is the single most valuable security habit there is. Breaches are routine, and reuse turns one leaked password into access to everything you own.
How do I remember all these passwords?
You do not. Use a password manager, which remembers them for you and fills them in. You then only need to memorise one strong passphrase for the manager itself.