All tools

Generators

Password Generator

Create strong, secure random passwords.

Create strong, cryptographically secure random passwords in one click. Length, uppercase, lowercase, numbers and symbols are all configurable, and generation happens entirely in your browser using the Web Crypto API.

Use the tool

Click generate...

What this tool does

A password generator creates a random string from a chosen character pool. Strong passwords protect you from credential stuffing and brute-force attacks. Our generator uses window.crypto.getRandomValues — the same secure source banks and password managers rely on.

Why people use it

  • Reused passwords are the #1 cause of account breaches.
  • Length matters more than complexity — a 16-character random password is exponentially harder to crack than an 8-character one with symbols.
  • Random passwords cannot be guessed from your personal information (birthdays, pet names, etc.).
  • Most password manager autofill flows accept generated strings without a second thought.

Step-by-step guide

  1. Open the Password Generator tool.
  2. Choose your password length — 16 characters is a sensible default; 20+ for high-value accounts.
  3. Toggle uppercase, lowercase, numbers and symbols on or off.
  4. Click ‘Generate’ to create a new password.
  5. Copy it to your clipboard and paste into your password manager.

Real examples

Securing a new email account

Sam signs up for a backup email and generates a 24-character password with all character classes enabled. He stores it in his password manager and never types it again.

Bulk password reset after a breach

After a service Lila used was breached, she rotates her passwords on five related accounts in a single afternoon, generating a fresh password for each.

Common use cases

  • Email and cloud account passwords
  • Wi-Fi network passwords
  • Database and API service credentials
  • Encrypted disk passphrases
  • One-off temporary credentials shared with a contractor

Frequently asked questions

Are generated passwords stored or logged?

Never. They are created in your browser and exist only in your tab. We have no servers that see them.

How random is the output?

We use window.crypto.getRandomValues, the browser’s cryptographically secure random number generator.

What length should I pick?

16 characters minimum for everyday accounts, 20+ for email and financial accounts. Length beats complexity every time.

Related tools