Password Generator

The colored bar below the password box shows its estimated strength: red means weak, orange means medium, and green means strong. Strength increases with length and character variety.

This tool uses the Web Crypto API (crypto.getRandomValues), your browser's cryptographically secure random number generator. Each character is chosen randomly and independently from a pool built from the character types you select (uppercase, lowercase, numbers, symbols).

• A character pool is built based on the character types you select (uppercase, lowercase, numbers, symbols).
• The browser's crypto.getRandomValues() function generates random numbers for the chosen length.
• Each random number is mapped to a character in the character pool.
• This is repeated for the selected password length to build the final password.
• An estimated strength score is calculated based on the password's length and character variety.

With a 16-character length including uppercase, lowercase, and numbers selected, a result like 'kJ8mQ2xVzR5nP9wT' — hard to guess — is produced.

• Use at least 12-16 characters for important accounts.
• Combining uppercase, lowercase, numbers, and symbols significantly reduces the chance of the password being guessed.
• Don't reuse the same password across multiple accounts — generate a unique one for each and store them in a password manager.

Weak passwords are one of the most common causes of account takeover attacks. Attackers can try common words, short passwords, and repeated characters using automated tools within minutes. A randomly generated password is far more resistant to this kind of guessing attack.

This tool uses your browser's built-in Web Crypto API to generate passwords. This API draws from the operating system's hardware-based randomness sources and is considered suitable for cryptographic applications — significantly more secure than JavaScript's Math.random() function.

Two key factors determine password strength: length and character variety. As length increases, the number of possible combinations grows exponentially, which is why a simple 20-character password is often more secure than a complex 8-character one. Character variety (uppercase, lowercase, numbers, symbols) widens the probability space per character.

It's recommended to use a password manager to securely store the generated password. Reusing the same password across multiple accounts means that if one account is compromised, the others are put at risk too; generating a unique password for each account eliminates this risk.

This tool runs entirely client-side (in your browser); the generated password is never sent to, saved by, or logged on any server. The moment you close or reload the page, the password generated up to that point is cleared from memory.