Is this generator cryptographically secure?

Yes. We use window.crypto.getRandomValues(), which is the same CSPRNG that powers TLS in your browser.

How long should my password be?

16 characters or longer with mixed classes is fine for most accounts. For long-term secrets (master passwords, seed phrases), aim for 24+ characters or use a passphrase.

Password Generator

Generate strong, random passwords right in your browser.

Length: 20

Uppercase A-ZNumbers 0-9Symbols !@#Avoid ambiguous

Pick a length, choose which character classes to include, and we'll generate a strong, unpredictable password right in your browser. Nothing is sent over the network.

How to use it

Pick a length
Drag the slider to 16+ characters for everyday use, or 24+ for high-value credentials.
Choose character classes
Enable digits and symbols unless the target system rejects them. Skip ambiguous characters if you'll be typing the password by hand.
Copy into your password manager
Hit Copy and paste directly into the new-credential form in your password manager. Don't email it to yourself.

What is it?

A password generator produces a random string of characters that cannot be guessed or brute-forced in any practical timeframe. The crucial detail is the source of randomness: a cryptographic random number generator (CSPRNG) gives outputs an attacker cannot predict even with full knowledge of previous outputs. We use the browser's Web Crypto API, the same primitive that protects TLS connections.

When to use it

Generate a new password every time you create an account or rotate a credential. Use the result inside a password manager - never memorise more than one or two passwords. For especially sensitive secrets (master passwords, hardware-wallet seed phrases), prefer a memorable diceware-style passphrase of 5+ random words over a short character string.

Common mistakes

Reusing passwords across sites is the biggest single risk - one breach exposes all your accounts. Don't substitute letters with similar-looking digits ('p4ssw0rd') and call it strong; cracking tools tried that years ago. And don't trust a 'strength meter' that scores based on character classes alone - length and entropy are what matter.

FAQ

Is this generator cryptographically secure?: Yes. We use window.crypto.getRandomValues(), which is the same CSPRNG that powers TLS in your browser.
How long should my password be?: 16 characters or longer with mixed classes is fine for most accounts. For long-term secrets (master passwords, seed phrases), aim for 24+ characters or use a passphrase.