Strong Password Generator
Generate strong random passwords using the browser's cryptographic random source. Choose length and character sets; nothing leaves your device.
Why length beats complexity
Password strength is driven by search space, which grows with length far faster than with character variety. A 20-character passphrase-style password built from lowercase letters and digits has more combinations than a 12-character password with symbols, and it is easier to type from a manager. The entropy estimate under the result uses the true search space of the character sets you selected, not a rule of thumb.
How the randomness is produced
The generator calls crypto.getRandomValues(), the browser's cryptographically secure random source. It does not use Math.random(), which is predictable enough that a determined attacker can reconstruct generated values. Nothing is transmitted and no password is stored, but treat any password that has ever appeared in a browser tab - even a local one - as potentially exposed if the device is shared.
A practical policy
- One unique password per service. Reuse is what turns a single breach into twenty account takeovers.
- Store them in a password manager; use this tool for the ones you must type by hand.
- Prefer 16 characters or more. Under 12 is no longer defensible for anything that holds money or email.
- Exclude look-alike characters when a password has to be read aloud or transcribed from paper.
Frequently asked questions
Which random source is used?
crypto.getRandomValues(), the CSPRNG built into the browser. Math.random() is deliberately not used because it is predictable.
How many bits is enough?
80 bits is solid for online accounts, 100+ for anything holding data long-term. The estimate under the password tells you where you are.
Should I include symbols?
They help only because some sites require them. Length contributes far more entropy per character than a symbol does.
Is it safe to generate a password here?
The value is generated locally and never sent anywhere, but copy it straight into your manager and avoid generating passwords on a shared or untrusted machine.
Related tools
Word Counter
Count words, characters, sentences and paragraphs as you type, with an estimated reading time. Runs entirely in your browser.
Character Counter
Count characters with and without spaces, letters, digits and punctuation, plus a letter frequency table for any text.
Case Converter
Convert text between eight letter cases instantly: uppercase, lowercase, title case, sentence case, camelCase, PascalCase, snake_case and kebab-case.
JSON Formatter & Validator
Format messy JSON with clean indentation, minify it back, or find the exact position of a syntax error. Runs locally in your browser.