Generate a strong, random password entirely in your browser. Nothing is sent to a server.
This free password generator creates strong, random passwords entirely inside your browser using the Web Crypto API's cryptographically secure random number generator. No password you generate is ever sent to a server, logged, or stored anywhere — closing this tab discards it completely.
A password's resistance to brute-force guessing is measured in bits of entropy: length × log2(character pool size). Adding a character type (say, symbols) increases the pool size linearly, but adding characters increases entropy multiplicatively. A 20-character all-lowercase password is typically far stronger than an 8-character password mixing all four character types.
This tool uses crypto.getRandomValues(), the Web Crypto API's source of cryptographically secure pseudo-random numbers — the same class of randomness used for encryption keys — rather than Math.random(), which is not designed to be unpredictable and should never be used to generate passwords or secrets.
Use a unique, randomly generated password for every account, and store them in a password manager rather than memorizing or reusing them. Enable two-factor authentication wherever it's offered — it protects you even if a password is ever compromised in a data breach.
Yes. All generation happens locally in your browser using the Web Crypto API. No password is ever transmitted to a server, logged, or stored.
NIST SP 800-63B and most security guidance recommend at least 12-16 characters for everyday accounts, and 20+ characters for high-value accounts like your password manager or primary email.
Mixing character types increases the pool per position, but length matters more for overall entropy. Aim for both: a long password using a mix of character types.
Entropy measures unpredictability in bits, calculated as length × log2(pool size). Higher entropy means exponentially more combinations an attacker must try to guess it.