Password Generator

How it works

This generator builds each password from cryptographically secure randomness using your browser's built-in crypto.getRandomValues, the same source recommended for security-sensitive values. For each position in the password it draws a random number and maps it onto the pool of enabled character types, so every generated password is independent of the last. Nothing is sent over the network, logged, or stored: the password exists only in your browser tab until you copy it. Reload the page and it is gone. That makes it safe to generate credentials here without trusting a server with them.

Choosing length and character types

The single biggest factor in password strength is length. Each extra character multiplies the number of possible combinations, so a longer password is dramatically harder to guess than a short but complicated one. Turning on more character types — lowercase, uppercase, digits and symbols — increases the size of the pool each character is drawn from, adding further strength. The tool shows an approximate entropy figure in bits so you can see the effect: aim for at least 80 bits for important accounts, and higher where a service allows it.

A concrete example

Imagine you need a password for an online bank account. Keep the default length of 16 and leave all four character types enabled. That gives a pool of 86 possible characters, which works out to roughly 6.4 bits of entropy per character — about 103 bits in total, far beyond what an offline brute-force attack can reasonably guess. Now suppose a shopping site only accepts letters and digits. Turning off symbols shrinks the pool to 62 characters (about 5.95 bits per character), so to keep a similar strength you would slide the length up to 18 or 20; the entropy readout updates as you move the slider, letting you tune until it sits comfortably in the strong range.

What to expect

The widget starts with a password already generated at 16 characters using all four types. A slider lets you choose any length from 4 to 64, and four checkboxes control whether lowercase letters, uppercase letters, digits and symbols are included. Unchecking every type shows a message asking you to select at least one, rather than producing an empty password. Below the result the tool prints an approximate entropy figure and a label that reflects it: weak under 50 bits, reasonable up to 80, strong up to 120, and very strong beyond that. A Copy button places the current password on your clipboard, letting you drop it straight into a sign-up form.

Common problems and fixes

The password is missing a type I need. If a service requires a symbol but your password has none, press Generate again — each run draws randomly from the pool, so a new one will very likely differ. A site rejects symbols entirely. Turn off the symbols checkbox and lengthen the password to compensate, since you are shrinking the pool. I see a message about selecting at least one character type. You have unchecked every box; tick at least one and Generate again. The Copy button does not reply. Clipboard access needs a secure context and may be blocked by browser settings; copy the text by hand instead — the password still renders on screen. I forgot to save it. Closing the tab discards the password with no way to recover it, so store it in your password manager before navigating away.

Using generated passwords safely

A strong random password is only useful if you don't have to remember it, so store it in a password manager rather than reusing it or writing it down insecurely. Use a different password for every account, so that a breach on one site can't unlock the others. If a service rejects certain symbols, turn that character type off and increase the length to compensate.

Frequently asked questions