How to use the Password Generator
- A strong 16-character password is ready as soon as the page loads.
- Drag the slider or type a number to set the length anywhere from 4 to 64 characters.
- Choose which character types to include. Every type you tick is guaranteed to appear at least once.
- Aim for Strong or Very strong on the meter, then click Copy and save the password in a password manager.
About this tool
Passwords are generated with the Web Crypto API, your browser's cryptographically secure random number generator, using unbiased sampling so no character is more likely than another. The strength meter measures real randomness (entropy in bits) from both the length and the size of the character pool, not just the length. Nothing is sent to any server, so we never see the passwords you create.
Frequently asked questions
Are these passwords truly random?
Yes. We use window.crypto.getRandomValues(), the browser's cryptographically secure generator — far stronger and less predictable than the basic Math.random() used by weak generators.
Is my password sent to your server?
No. Generation happens entirely in your browser. The password is never transmitted, logged, or stored anywhere, by us or anyone else.
What makes a strong password?
Length matters most: at least 12–16 characters mixing uppercase, lowercase, numbers, and symbols — and unique for every single site you use.
Should I use the same password on multiple sites?
Never. If one site suffers a data breach, reused passwords let attackers walk straight into your email, banking, and social accounts. Generate a unique password per site and keep them in a password manager.