Password Generator

Strong password generator

Create strong, random passwords. Pick the length and character sets; copy with one tap.

Generated securely in your browser

Every password is built with your device's cryptographic random generator — the same class of randomness used for real security work — and never leaves your browser. Nothing is transmitted, logged or stored, so you can generate a password here and trust that no copy exists anywhere but your screen. Use the length slider and character toggles to match a site's specific rules, and turn on "Exclude look-alikes" to avoid characters that are easy to misread, like O/0 and l/1.

What actually makes a password strong

Strength comes down to two things: length and unpredictability. Length matters more than complexity — a long random password is dramatically harder to crack than a short one with a few symbols sprinkled in, because each extra character multiplies the number of possibilities an attacker must try. A truly random 16-character password is effectively impossible to brute-force with today's technology, which is why the length slider is the most important control here.

Use a manager, not your memory

The biggest real-world risk isn't a weak password — it's reusing one across sites, because a breach at any one site then exposes all of them. The practical answer is a password manager: it stores a unique, random password for every account so you only ever remember one master passphrase. Generate a fresh password here for each new account and save it straight into your manager.

Quick rules

  • Use at least 16 characters wherever the site allows it
  • Mix upper, lower, numbers and symbols
  • Never reuse a password — one unique password per site
  • Store them in a password manager rather than memorising

Need other random values? Generate UUIDs and hashes with the hash & UUID generator, or random numbers with the random number generator.

FAQ

Are these passwords safe and random?
Yes. They use the browser's cryptographically secure generator (crypto.getRandomValues) and are created entirely on your device.
Is anything stored or sent?
No. Nothing is logged, stored, or transmitted — close the tab and it's gone.

Related tools