Secure password generator
Choose the length and character types. The password is generated locally and never transmitted.
100% private — your files are processed on your device and never uploaded to a server.
How it works
- 1
Adjust the options
Choose the length and which character types to include: lowercase, uppercase, numbers and symbols.
- 2
Generate the password
It's created automatically using the browser's cryptographically secure random number generator.
- 3
Copy and use it
Tap "Copy" to send it to your clipboard. It's never stored or sent to a server.
Why use a password generator
Predictable passwords (dates, names, sequences) are the most common entry point for brute-force and dictionary attacks. A randomly generated password with enough length and character variety is exponentially harder to guess.
This tool uses crypto.getRandomValues(), the browser's cryptographically secure random API (not Math.random(), which isn't safe for security purposes). The password is generated and displayed entirely on your device — it never travels over the internet or gets logged on any server.
Frequently asked questions
Is this tool safe to use?
Yes. Generation happens 100% in your browser using crypto.getRandomValues(), the same API password managers rely on. The password is never sent to a server or stored anywhere.
What password length is recommended?
For most services, 16 characters with uppercase, lowercase, numbers and symbols offers excellent security. For highly sensitive accounts, consider 20 or more.
What does the strength indicator mean?
It estimates entropy bits based on length and the number of possible characters. More bits means more possible combinations and more time required to brute-force it.
Why avoid ambiguous characters?
Characters like "I", "l", "1", "O" and "0" can be confused when transcribing the password by hand or reading it in certain fonts. Enable that option if you'll be copying it manually.