Strong Password Generator — Secure & Random

100% freeRuns in your browserNo sign-up

About the Password Generator

This generator creates passwords from cryptographically secure randomness — the browser's crypto.getRandomValues, the same source used for encryption keys — not from Math.random, whose output is predictable.

Choose the length and character sets, exclude look-alike characters (0/O, 1/l/I) if you will ever type the password by hand, and generate as many candidates as you like. Passwords are created on your device and never transmitted or saved.

How to use the Password Generator

  1. Set the length (16 or more is recommended).
  2. Tick the character sets to include, and optionally exclude ambiguous characters.
  3. Click Generate until you get a password you like, then copy it into your password manager.

How strong is a password?

Strength = entropy = length × log2(alphabet size). A 16-character password with upper+lower+digits+symbols (≈ 78 symbols) carries about 100 bits of entropy — far beyond brute-force reach at current computing speeds. Length matters more than substituting a for @.

Frequently asked questions

Are these passwords really random and safe?

Yes. They come from the Web Crypto API's CSPRNG on your own device. No server sees them, and closing the page destroys them.

How long should a password be?

16+ characters for anything important, with a password manager storing the rest. Every added character multiplies brute-force cost.

Why avoid dictionary-style passwords?

Attackers try word lists first. Random characters from a large alphabet give vastly more combinations per character than concatenating dictionary words.

Related tools