Secure Password Generator

How to use the secure password generator

1. Set the length — 16 or more is a sensible default.
2. Choose which character sets to include.
3. Copy the password straight into your password manager.

About this tool

A strong password is long and unpredictable. Length matters more than exotic symbols: adding characters increases the search space faster than adding character classes does, which is why a 20-character password beats a 10-character one full of punctuation.

Randomness comes from crypto.getRandomValues(), the browser's cryptographically secure generator, not Math.random(). Values are generated in the page, are never sent anywhere, and are not written to storage — reloading the page discards them. Store what you generate in a password manager rather than retyping it.

Common uses

• Creating a unique password for a new account.
• Generating an API key or shared secret.
• Producing a temporary password to hand over securely.

Frequently asked questions

Is generating a password in a browser safe?

The generation itself uses the same cryptographic source your operating system provides. The risks are elsewhere: a compromised device, a malicious extension, or pasting the password somewhere insecure. On a machine you trust, it is sound.

How long should a password be?

At least 16 characters for ordinary accounts, and longer for anything protecting other credentials. Where a service allows a passphrase, several random words are easier to type and equally strong.

Are generated passwords stored or logged?

No. They exist only in the page's memory and disappear when you close or reload the tab.