Stays in your browser
Password Generator — Strong Random Passwords
Free password generator. Create configurable passwords with cryptographically strong randomness.
ffVYc$&mO3gjH+xO
Generating a password that survives contact with reality
Length beats complexity. Every additional character multiplies the number of candidates, while a required symbol usually adds one drawn from a short list that an attacker already assumes. A long passphrase of random words is both stronger and easier to type than eight characters containing a symbol.
The quality of the randomness is the whole product. A general-purpose random function is not suitable for secrets; passwords must come from a cryptographically secure source, which in a browser means the platform crypto API. This generator uses it, and the result never leaves the page.
What you do with the password matters more than how it was generated. Reuse is the failure mode that turns one breach into many, and a password manager removes the reason to reuse. Turn on two-factor authentication as well, because it protects the account even when the password itself leaks.
FAQ
- Are passwords secure?
- Yes — crypto.getRandomValues, and nothing is uploaded.
- Can I disable symbols?
- Toggle upper, lower, digits, and symbols as needed.
- Do you store passwords?
- No. Refresh clears the page.
- How long should a password be?
- Sixteen random characters, or four to six randomly chosen words, is a reasonable floor for anything that matters. The useful question is not how long it is but how it was chosen: a long password built from a predictable pattern is weaker than a shorter random one.
- Is the generated password sent anywhere?
- No. Generation and display both happen in the page, and the result is never transmitted or stored. Refreshing the page discards it, which is why you should save it to your password manager before navigating away.
- Should I use a password or a passphrase?
- Either, provided the words or characters are chosen at random rather than composed by you. A four-word passphrase is often stronger than a short complex password and much easier to type on a phone, which matters because a password that is annoying to enter gets reused.