Password Generator — what it does
Generates random passwords using your browser's cryptographic random source, with control over length and character sets — and an honest strength estimate that states its assumptions. Built for the moment a password field says 'too weak' and you need something both memorable-optional and genuinely strong.
How to use Password Generator
- Set the length — 16+ for anything that matters.
- Toggle character sets: uppercase, digits, symbols. Fewer sets at greater length is fine.
- Click generate; copy with one click.
- Read the entropy estimate — it explains why length beats symbol soup.
- Generate a fresh one per account; reuse is what actually breaks people.
Worked example: length versus symbols
A 12-character password with every symbol class has roughly 78 bits of entropy; a 20-character one with only letters and digits has about 119. The second is both stronger AND easier to type on a phone. The tool's strength readout makes this trade-off visible so you stop assuming 'symbols' is what makes a password strong.
At a glance
| Randomness | window.crypto.getRandomValues — a CSPRNG, not Math.random |
|---|---|
| Options | Length slider; upper/lower/digits/symbols toggles; exclude-lookalikes option |
| Estimate | Entropy in bits, computed from the exact character pool used |
| Privacy | Generated and shown only in your tab — no password is stored, logged or transmitted |
| Limits | It makes passwords, not passphrases — and it cannot check a password you already use |
Frequently asked questions
- What is Password Generator?
- Create strong random passwords with full character-set control.
- Is Password Generator free to use?
- Yes — Password Generator is free to use, with no sign-up, no install and no account.
- Does Password Generator upload or store my data?
- No — Password Generator runs entirely in your browser, so your text, files and results never leave your device.
- Do I need to install anything to use Password Generator?
- No — it works in any modern browser (Chrome, Edge, Firefox, Safari) with no downloads, accounts or plugins.
- How long should a password be in practice?
- Sixteen or more characters for anything valuable, from a truly random generator, unique per site. The length matters more than the character mix once the source is properly random.
- Is Math.random not good enough?
- No — it is predictable by design. This tool uses the browser's cryptographic random source (crypto.getRandomValues), which is the correct primitive for secrets.
- Should I add a personal word to make it memorable?
- Adding a predictable word lowers the real strength below the estimate shown. If memorability matters, use a passphrase-style scheme instead — but keep the generator's randomness for the unpredictable part.