Password Generator
Generate strong, random passwords with a cryptographically secure random source.
How to use Password Generator
- Adjust the length and choose which character types to include.
- A new password generates automatically — click Generate for a different one.
- Copy it with the copy button.
About this tool
The Password Generator creates strong random passwords using your browser's cryptographically secure random number generator — the same quality of randomness used for security-sensitive operations, not a weaker general-purpose random function. Choose the length and which character types to include, and see an estimate of the password's strength based on how many possible combinations it represents. Nothing is generated on a server and nothing is stored — each password exists only in your browser until you copy it.
Frequently Asked Questions
How is randomness generated?
Using the Web Crypto API's crypto.getRandomValues(), a cryptographically secure random number generator built into your browser — not Math.random(), which is not designed to be unpredictable enough for security purposes. Character selection also uses rejection sampling to avoid the slight statistical bias a naive modulo-based approach would introduce.
Is this password stored or sent anywhere?
No — it's generated and displayed entirely in your browser and isn't saved, logged, or transmitted anywhere. Once you navigate away, it's gone unless you saved it yourself.
How is the strength estimate calculated?
From the password's entropy: the length multiplied by the log2 of how many possible characters are in play at each position. This measures resistance to brute-force guessing, not whether the password appears in a leaked-password database — a long random password from this tool won't appear in one, since it's freshly generated.