Password Generator
Generate randomized, strong, secure passwords.
Password settings
Character Set
Password length
Password tips
Change your passwords periodically.
Never use the same password on multiple sensitive accounts.
Use a password with at least 16 characters. It should contain lowercase letters, uppercase letters, numbers, and symbols.
Refrain from saving your password in a web browser (Firefox, Chrome, Internet Explorer, Safari). Instead, use a tool which manages an encrypted password locker.
Do not log into sensitive accounts while connected to a public Wi-Fi hotspot.
Check that you are using a secure (HTTPS, SSH, SFTP) connection before transmitting your password over the web.
Why use a password generator?
Reused or predictable passwords are one of the most common causes of account compromise. A randomly generated password with a mix of character types is far harder to guess or brute-force than anything a person would naturally choose. This generator creates passwords entirely in your browser using the Web Crypto API's cryptographically secure random number generator, so your passwords are never sent to a server.
How to use this tool
Choose which character sets to include (lowercase, uppercase, numbers, symbols), optionally
enable "Avoid Ambiguous" to exclude easily-confused characters like 0/O
or 1/l, set your desired length, and click Generate
Password. Copy the result with the clipboard icon and store it in a password manager
rather than reusing it elsewhere.
Common use cases
- Creating a unique password for a new account instead of reusing one from another site.
- Generating a one-off password for a shared or temporary account.
- Producing a random string to use as an API key, secret, or test fixture during development.
- Meeting a specific site's password policy by tuning length and character sets before generating.
Frequently asked questions
How random are these passwords, really?
They're generated with the Web Crypto API's crypto.getRandomValues(), a cryptographically secure random number generator built into your browser, the same category of randomness source used for generating encryption keys. It's not a predictable pseudo-random sequence like Math.random().
Are my generated passwords stored or sent anywhere?
No. Generation happens entirely client-side in your browser; nothing is transmitted to our server or logged.
What length should I use?
16 characters with all character sets enabled is a reasonable default for most accounts. For anything protecting sensitive data, 20+ characters is safer, since length matters more than complexity once you're already mixing character types.
What does "Avoid Ambiguous" do?
It excludes characters that are easy to misread or mistype when a password is written down or read aloud, like 0 vs O, or 1 vs l vs I. Useful if you might need to type the password manually rather than paste it.