Runs locally in your browser
Secure Password Generator
Create a strong random password with a cryptographically secure browser API. Customize length and character types without sending the result anywhere.
Create a strong unique password
Length and randomness matter more than memorable substitutions. Keep several character groups enabled, choose a length accepted by the service, and generate a different password for every account.
How this generator chooses characters
Random values come from the browser Web Crypto API rather than Math.random(). The generator first includes at least one character from every enabled group, fills the remaining positions from the combined pool, and securely shuffles the result. Rejection sampling avoids favoring some characters when random bytes do not divide evenly across the pool.
| Setting | Effect | Tradeoff |
|---|---|---|
| Longer length | Expands the possible password space | Some services impose maximum lengths |
| More character groups | Meets common composition rules | Symbols may be rejected by legacy forms |
| Avoid ambiguous | Makes manual reading easier | Slightly reduces the character pool |
Store passwords in a password manager
A generated password is difficult to remember by design. Copy it directly into the account form and save it in a trusted password manager. Avoid sending passwords through chat, email, screenshots, or shared documents.
Understand the strength estimate
The displayed entropy is a mathematical estimate based on the selected length and character pool. It is useful for comparing settings, but it is not a promise about cracking time. Service-side rate limits, password hashing, accidental disclosure, phishing, and reuse all affect real-world security.
Frequently asked questions
Are these passwords generated securely?
Yes. Random choices use the browser cryptographic random number generator with rejection sampling to avoid modulo bias.
How long should a password be?
For a randomly generated password, 16 or more characters is a practical baseline. Use longer values when a service permits them, especially if fewer character types are selected.
What does excluding ambiguous characters do?
It removes easily confused characters such as I, l, 1, O, 0, and o. This is helpful when passwords must be read or typed manually, but it slightly reduces the character pool.
Should I reuse the generated password?
No. Use a unique password for every account and store it in a reputable password manager.
Is the generated password saved?
No. Generation happens locally and the password is not sent to OnlineTools or placed in the page URL.