Password Generator
Create secure random passwords with custom options.
How to use the Password Generator
Configure the options once and generate an unlimited number of strong, cryptographically random passwords — all in your browser, nothing stored or transmitted.
- 1
Set the length
Choose a password length between 4 and 128 characters. For most accounts, 16 characters is a good minimum. For high-value accounts like banking or email, use 20 or more.
- 2
Select character types
Check the boxes for uppercase (A–Z), lowercase (a–z), numbers (0–9), and symbols. Using all four types gives the largest possible character set and the strongest passwords. Uncheck types only if the target site explicitly disallows certain characters.
- 3
Click Generate Password
A new random password is generated using your settings. Your options are saved automatically, so the next visit will restore your preferred length and character set.
- 4
Check the strength indicator
The bar below the output shows Weak, Fair, or Strong based on length and character diversity. Aim for Strong — which means 12+ characters with mixed types.
- 5
Copy and save in a password manager
Click Copy to copy the password to your clipboard. Paste it directly into a password manager (Bitwarden, 1Password, etc.) — don't type or store it anywhere else.
Frequently asked questions
How does this password generator work?
The generator builds a character pool from your selected types, then picks characters at random using Math.random() — a pseudorandom number generator seeded by the browser's entropy sources. All generation runs in your browser; no passwords are ever transmitted to any server. You can verify this by watching the Network tab: it stays empty while generating.
What makes a password strong?
Strength comes from two factors: length and character variety. A 12-character password using uppercase, lowercase, numbers, and symbols has over 475 trillion possible combinations. Each additional character multiplies the search space. Modern password crackers can test billions of guesses per second, so 16+ characters is now the practical minimum for sensitive accounts.
What password length should I use?
The minimum recommendation from NIST (the US standards body for security) is now 15 characters for human-chosen passwords. For generated passwords stored in a manager, 20–32 characters is ideal — longer passwords are no harder to store but dramatically harder to crack. Use 64 characters for master passwords or encryption keys if the system supports it.
Should I include symbols in my password?
Yes, whenever the target site allows it. Symbols increase the character set from 62 (letters + digits) to 90+, which roughly doubles the effective security of the same length password. Some systems restrict allowed symbols — if a generated password is rejected, regenerate without symbols rather than removing characters manually.
Can I use this to generate PINs?
Yes. Uncheck all options except Numbers (0–9) and set the length to 4, 6, or 8. The output will be a numeric-only PIN. Note that PINs are inherently weak by entropy standards — use them only where required (ATM cards, device unlock), not for online accounts.
Should I use a password manager?
Yes. A password manager lets you use a unique, long, random password for every account without having to remember any of them. You only need to remember one strong master password. Free options include Bitwarden (open source, cloud sync) and KeePassXC (local-only). Using the same password across multiple sites is the most common cause of account compromises.
What is the difference between a passphrase and a random password?
A passphrase is a sequence of random words (e.g. correct-horse-battery-staple) that is long but memorable. A random password is shorter but uses a larger character set. Both can reach equivalent security: a 4-word passphrase (~44 bits of entropy) is roughly equivalent to a random 8-character mixed-case password. For machine-stored passwords, random passwords are preferred; for passwords you must type regularly, passphrases are more practical.