Password Generator
Generate strong, random passwords instantly. Runs in your browser.
How to use this tool
- Enter length and include symbols in the fields above.
- Results update instantly as you type — or click Calculate.
- Read your password and the full breakdown beneath it.
Generate strong, random passwords instantly. Runs in your browser.
How it works
The Password Generator creates a random, strong password of your chosen length. You can include uppercase letters, lowercase letters, digits, and symbols to increase complexity. All randomness is generated locally in your browser using the Web Crypto API, so the password is never transmitted over the internet.
A strong password should be at least 12 characters long and include a mix of character types. Longer passwords with symbols are exponentially harder to brute-force: a 16-character alphanumeric password has roughly 62^16 possible combinations, which is beyond the reach of current cracking hardware.
Use this tool whenever you need a new password for an account, a Wi-Fi network, an API key, or any other secret. Copy the generated password and save it immediately in a password manager such as Bitwarden, 1Password, or KeePass.
If you need a more memorable passphrase instead of a random string, consider using a passphrase generator (four or more random words) — but for maximum security, random character strings are stronger at any given character length.
Worked example
Generate a strong password for a new online account
- Set the Length field to 16.
- Enable the 'Include symbols' option.
- Click Generate.
- Copy the result and paste it immediately into your password manager.
- Use that saved password when creating your account.
A 16-character password such as 'Kx#9mP!vL2@qRz7&' is generated and ready to use.
Common mistakes to avoid
- Saving the generated password in a browser note or plain-text file instead of a dedicated password manager.
- Reusing the same generated password across multiple sites — generate a unique password for every account.
- Choosing a length below 12 characters, which can be brute-forced more quickly as computing power increases.
Key terms
- Entropy
- A measure of password unpredictability; more characters and more character types mean higher entropy and a harder-to-crack password.
- Web Crypto API
- A browser-native API that provides cryptographically secure random number generation without relying on a server.
Frequently asked questions
- Is the generated password sent to your servers?
- No. The password is generated entirely in your browser using the Web Crypto API. It is never transmitted anywhere.
- How long should my password be?
- At least 12 characters for most accounts; 16 or more for email, banking, or any account that protects other accounts.
- What if a site does not allow symbols?
- Disable the 'Include symbols' option and generate an alphanumeric-only password. Increase the length to at least 16 characters to compensate for the reduced character set.