Generate secure, random passwords with customizable options. Pure client-side.
Security · passwords · random
Create strong random passwords with length and character-class controls, generated in your browser. Use it when you need a high-entropy secret for an account, API token stand-in, or local credential — without sending the result through a remote generator.
Strength comes primarily from entropy: length plus an unpredictable random source. A 16+ character password drawn from a large alphabet (upper, lower, digits, symbols) resists online guessing far better than short phrases with predictable substitutions (P@ssw0rd1). Prefer a password manager to store unique passwords per site; this generator helps when you need a fresh secret quickly.
Do not reuse passwords across banks, email, and work SSO. One breach should not unlock everything else. Enable MFA wherever it is available.
| Use case | Suggestion |
|---|---|
| Web account (with manager) | 16–24 random chars, full alphabet if allowed |
| Legacy system with rules | Meet min classes, then maximize length |
| Memorable shared Wi‑Fi (rare) | Long passphrase of random words > short complex string |
| API keys | Prefer provider-issued keys; random strings are not a substitute for scoped tokens |
Browsers expose crypto.getRandomValues for cryptographically strong randomness. Avoid Math.random() for security-sensitive secrets. After generation, the only copies should be your password manager and the service you are enrolling — not email, Slack, or a spreadsheet.
Generation runs in your browser. We do not need the value on a server. Still treat shared machines carefully. Privacy Policy.
Many sites enforce arbitrary composition rules or maximum lengths. Adjust character sets or length to match their policy — good policies emphasize length over bizarre symbol requirements.
A diceware-style passphrase (multiple random words) can be easier to type when managers are unavailable. Random character strings are excellent when stored in a manager and autofilled.