Password Generator
Generate strong random passwords using a cryptographically secure random number generator to keep your accounts safe.
How to Use
- Use the slider to set the password length (8–64 characters). Default is 16.
- Check the character types you want: uppercase, lowercase, numbers, special characters.
- Click "Generate Password" to create a password using a cryptographically secure generator.
- The generated password is displayed in large text with a strength indicator.
- Click "Copy Password" to copy it to your clipboard for immediate use.
Password Strength Criteria
| Strength | Criteria | Color |
|---|---|---|
| Weak | Fewer than 8 characters | Red |
| Medium | 8–11 characters with at least 2 character types | Orange |
| Strong | 12–15 characters with at least 3 character types | Green |
| Very Strong | 16+ characters with all 4 character types | Dark Green |
FAQ
Is this password generator secure?
Yes. This tool uses the browser's built-in crypto.getRandomValues() API, a cryptographically secure pseudo-random number generator (CSPRNG). All passwords are generated locally in your browser and are never sent to any server.
How long should my password be?
We recommend at least 12 characters with a mix of uppercase, lowercase, numbers, and special characters. For important accounts (banking, email), use 16 or more characters. Longer passwords with more character types take exponentially longer to crack by brute force.
Why shouldn't I reuse passwords?
If you use the same password across multiple sites and one site suffers a data breach, attackers can try that password on your other accounts (known as 'credential stuffing'). Use a unique random password for each account and consider a password manager.
Do special characters cause issues on some websites?
A few websites may restrict certain special characters. If that happens, uncheck the "Special" option and generate a password with only letters and numbers — but consider increasing the length to compensate for security.
Are passwords stored or sent to a server?
No. All password generation and display happens entirely in your browser. No data is ever sent to a server. Once you close the page, generated passwords are not retained.