Password Generator
Generate secure, random passwords with custom length and character sets. 100% client-side — your passwords never leave your browser.
How this password generator works
This tool creates a random password from the character sets you choose and shows it in the box at the top of the card. Every password is generated inside your browser with the Web Crypto API, which is designed to produce cryptographically strong random values. The password is never uploaded, so the characters stay on your device.
Step by step
- Drag the Length slider. It ranges from 8 to 64 characters, and the password is regenerated at the length you pick.
- Tick the character sets you want: Uppercase (A-Z), Lowercase (a-z), Numbers (0-9) and Symbols. The tool stops you from unticking the last remaining set, so the pool is never empty.
- Check the Strength bar. It updates for each password.
- Click the copy icon to copy the password, or press Generate New Password to get a different one.
What the character sets change
Each character is picked at random from the combined pool of the sets you ticked. The symbol set contains 26 punctuation characters. With all four sets the pool is 88 characters, so a 16-character password has 88 to the power of 16 possible combinations, which is about 103 bits of entropy. Lowercase letters alone (26 characters) give about 75 bits at the same length. Each extra character multiplies the number of possibilities, which is why length usually matters more than any single character type.
How strength is rated
The Strength bar uses simple rules, not a breach check. Passwords under 8 characters are rated Weak. Otherwise the tool awards one point each for lowercase letters, uppercase letters, digits and symbols, plus one more for 16 characters or more. A score of 0 to 2 is Moderate, 3 is Strong, and 4 or 5 is Very Strong. A password can score well and still be a common one, so treat the label as a guide.
Tips and limits
- Use at least 16 characters with all four sets for most accounts. Longer is better when the site allows it.
- Some websites reject certain symbols or cap the length. If that happens, untick Symbols or shorten the password and generate again.
- Use a unique password for each account. If one site is breached, a reused password lets attackers try it elsewhere.
- Store generated passwords in a password manager rather than in a note or a browser tab. This tool does not save anything for you.
- Turn on two-factor authentication wherever it is offered. A strong password is only one layer of protection.
Password Generator – Frequently Asked Questions
How secure is this password generator?
Passwords are generated in your browser with crypto.getRandomValues, the browser's cryptographically secure random number generator. Nothing you generate is sent to our servers. Security still depends on length and on storing the password safely.
What length should I use?
For most accounts, 16 or more characters with a mix of uppercase, lowercase, numbers and symbols is a strong choice. For high-value accounts such as email and banking, many people go to 20 or more. Longer is stronger, as long as the site accepts it.
Why does a site reject my generated password?
Some sites limit which symbols they accept or require a specific mix of characters. If a password is rejected, untick Symbols or lower the length, then generate again.
How do I remember a complex password?
You do not need to. Store generated passwords in a password manager such as Bitwarden, 1Password or Dashlane, and protect the manager with one strong master password.