Password Generator

Generate secure random passwords

Generate Strong, Random Passwords

Create passwords that are genuinely hard to guess. Choose the length and which character types to include, then copy a fresh, random password. It is generated using your browser's secure randomness and is never sent to a server or saved anywhere, so only you ever see it.

What makes a password strong

Length is the single biggest factor. A longer password has far more possible combinations, which makes brute-force attacks impractical. Mixing uppercase, lowercase, numbers and symbols increases the variety further. Aim for at least 12 to 16 characters, and longer for important accounts such as email and banking.

Password best practices

  • Use a unique password for every account so a breach on one site cannot unlock the others.
  • Never reuse old passwords or simple variations of them.
  • Store them in a password manager rather than a notebook or browser note.
  • Turn on two-factor authentication wherever it is offered for an extra layer of protection.

Why random beats memorable

Passwords based on names, dates or dictionary words are easy for attackers to guess with automated tools. Random strings have no pattern to exploit. Because a password manager remembers them for you, there is no downside to using long random passwords everywhere.

Private and secure

Generation happens entirely on your device using a cryptographically secure random source. Nothing is logged, transmitted or stored, so each password is for your eyes only.

Frequently asked questions

Are the generated passwords secure?

Yes. They are created using your browser cryptographically secure random source and are never stored or transmitted.

Are my passwords saved or sent anywhere?

No. Everything happens in your browser. No password is logged, sent to a server or stored.

How long should my password be?

At least 12 to 16 characters. Use longer passwords for important accounts like email and banking.

Why should I use a unique password for each account?

If one site is breached, unique passwords stop attackers from reusing the leaked password to access your other accounts.