About this tool
Generate random passwords from 8 to 128 characters, mixing uppercase letters, lowercase letters, digits, and symbols. The generator uses the browser's cryptographic random source (crypto.getRandomValues), so every password is unpredictable and never leaves your device. Use it for new accounts, replacing compromised credentials, or seeding a password manager.
How to use
- Set the length with the slider (8 to 128 characters). For most services 16 is enough; for master passwords used by password managers or critical accounts, pick 24 or more.
- Enable the character classes you want included. The more classes active, the stronger the password. Some sites restrict which symbols they accept, so check the rules before turning that option on.
- Click Generate. Each click produces a new password; generate a few times until you get one you like.
- Copy it into your password manager or signup form. Don't store it in plain text such as notes, email, or messages.
Frequently asked questions
- Is it safe to generate passwords on a website?
- Yes, in this case. The generator runs entirely in your browser through crypto.getRandomValues, the operating system's cryptographic API. Nothing is sent to servers. Even so, avoid generating important passwords on shared computers or untrusted networks.
- What length should I use?
- 16 characters with uppercase, lowercase, and digits cover most accounts. For critical credentials (primary email, password manager, banking) go for 20 to 32 characters with symbols. Length matters more than complexity: a long letters-only password is harder to guess than a short one full of symbols.
- Should I include symbols?
- Whenever the service accepts them. Symbols significantly increase the number of possible combinations. If a site rejects the password, generate another one without symbols or check the specific rules, since some services only accept a subset of special characters.
- How should I store generated passwords?
- Use a password manager (Bitwarden, 1Password, KeePass, or your browser's built-in manager). Don't keep them in text files, emails, or messages. A good manager autofills, generates new ones when you need them, and syncs across devices.