Secure Password Generator
Generate a cryptographically random password that guarantees at least one uppercase, lowercase, digit, and symbol. Free, runs in your browser.
How to use this tool
- Choose a length — 16+ is recommended for most accounts.
- Keep symbols enabled for maximum compatibility with complex-password policies.
- Click Calculate to generate a new password. Click again to re-roll.
- Copy the result and store it in a password manager.
This generator guarantees that every password contains at least one uppercase letter, one lowercase letter, one digit, and (optionally) one symbol — satisfying most site requirements. Everything runs in your browser; nothing is sent to a server.
How it works
The Secure Password Generator creates a random password that is guaranteed to contain at least one uppercase letter, one lowercase letter, one digit, and one symbol (when symbols are enabled). This guarantee matters because a purely random password occasionally omits a required character class, failing validation rules on sites that enforce complexity requirements.
The generation runs entirely in your browser using the Web Cryptography API, which provides cryptographically secure randomness -- the same source used by security software. No password leaves your device.
Use this tool whenever you need a new password for a website, application, or service. Longer passwords are always better: 16 characters is a reasonable minimum for general accounts; use 20 or more for financial accounts or administrator credentials. Store the result in a password manager immediately after generating it.
Worked example
Generating a 20-character password for a bank account
- Set Length to 20.
- Enable Include symbols.
- Click Generate.
- Copy the password and paste it into your password manager before closing the page.
- Use the password during account signup or a password change.
A strong, guaranteed-complex password ready for immediate use.
Common mistakes to avoid
- Closing the page before copying the password to a password manager, requiring you to generate a new one.
- Choosing a length under 12 characters because it feels easier to copy -- length is your primary defense, not just complexity.
- Reusing a generated password across multiple accounts, which defeats its purpose if one site is breached.
Key terms
- Cryptographic randomness
- Randomness produced by an algorithm that is unpredictable even to an attacker with knowledge of previous outputs, suitable for security use.
- Character class
- A category of characters: uppercase letters, lowercase letters, digits, or symbols.
- Password complexity requirement
- A site rule mandating that passwords contain characters from two or more character classes.
Frequently asked questions
- How is this different from the basic password generator?
- This tool guarantees at least one character from each selected group and shuffles the result to avoid predictable patterns.
- What is 'entropy'?
- Entropy (measured in bits) quantifies password strength. Each additional bit doubles the guessing difficulty. 80+ bits is considered Very Strong.
- Is the generated password sent anywhere?
- No — the password is generated entirely in your browser using JavaScript and never transmitted.