Generate a secure password
Generate a strong random password — pick the length and which character sets to include — produced with your browser's cryptographically secure randomness and never sent anywhere.
Open the tool, then paste the sample input below. Everything runs locally in your browser.
The problem
A strong password should be long and random, not a memorable pattern. Generating one in the browser with secure randomness avoids weak choices and avoids the risk of a generator that sends the password to a server.
Sample input
length: 16
sets: lowercase + uppercase + digits + symbolsExpected output
k7$Rm2!pXq9zT4@wIllustrative only — each run produces a different password. A 16-character mix of all four sets is a strong default; longer is stronger.
How to do it
- Choose the password length.
- Select the character sets to include.
- Generate the password.
- Copy it into your password manager.
- Generate a fresh one for each account.
Common mistakes
- Choosing a short length to make it memorable.
- Reusing one generated password across accounts.
- Excluding symbols where the site allows them.
- Pasting the password into an untrusted page.
- Relying on a non-cryptographic random source.
Related tools
Related guides
FAQ
What makes a password strong?
Length and randomness. A long password drawn at random from a large character set is far harder to guess or brute-force than a short memorable one.
How long should a password be?
At least 16 characters for important accounts, longer where allowed. Length adds more strength than adding complexity to a short password.
Is the password random and secure?
It is generated with the browser's cryptographically secure random source, not a predictable one, and it is never sent to a server.
Should I reuse a generated password?
No. Generate a unique password per account and store them in a password manager so a breach of one site does not expose the others.
Is the password uploaded?
No. Generation runs locally in your browser. The password is never sent anywhere.
Passwords are generated locally in your browser with secure randomness. Nothing is uploaded.
Generate passwords, hash and encode text, scan for secrets and decode tokens — grouped in one place.