Password Generator
Generate secure random passwords
How to use
- Set password length
- Choose character types
- Generate and copy password
Use cases
- Account security
- Password management
- Secure authentication
- Data protection
About the Password Generator
A password generator produces high-entropy random strings unsuitable for a human to guess. True security depends on using a cryptographically secure random source (not Math.random) and guaranteeing the output actually covers the requested character classes. This tool does both, and includes a realistic strength meter that weights length and diversity together.
Features
- crypto.getRandomValues — cryptographically secure randomness
- Uniform integer sampling (no modulo bias)
- Guarantees at least one character from each selected class
- Live strength meter (length + character-class diversity)
- Length 8–64
How it works
- Pick a length between 8 and 64.
- Check the character classes you want — uppercase, lowercase, numbers, symbols.
- A new password generates instantly; regenerate or copy it.
- Review the strength meter to see why it's rated that way.
Frequently asked questions
Is this actually secure?
+
Yes. We use crypto.getRandomValues (backed by the OS CSPRNG) with rejection sampling to avoid modulo bias. Many online generators silently use Math.random, which is predictable.
How long should my password be?
+
For online accounts with a password manager, 20+ random characters across mixed classes is overkill-secure. For memorized passwords, use a passphrase (4+ random words from a list of 2,000+).
Are the passwords stored or logged?
+
No. Generation happens in your browser; nothing is sent over the network.
Why are symbols important?
+
Each character class you include multiplies the keyspace. 16 lowercase letters ≈ 75 bits of entropy. 16 mixed alphanumeric+symbols ≈ 105 bits. The latter resists brute force for millennia.
Does every password include one of each selected class?
+
Yes — when length ≥ class count, we guarantee at least one character from each selected pool and shuffle the result. No more 'include symbols' ticked but the password has none.