Strong passwords, generated privately
This tool builds random passwords using your browser's cryptographically secure random number generator — the same class of randomness used for security-sensitive work. Choose a length and which character types to include, and it assembles a password that's genuinely hard to guess. Nothing is ever sent over the network, so the password exists only on your screen until you copy it.
What makes a password strong
Two things drive strength: length and unpredictability. Each extra character multiplies the number of possible combinations an attacker must try, and mixing character sets widens the pool per character. A random 16-character password drawn from all four sets is astronomically harder to crack than a short or dictionary-based one.
Using generated passwords safely
- Never reuse a password across sites — one leak shouldn't unlock everything.
- Store them in a password manager so you don't have to remember them.
- Enable two-factor authentication wherever it's offered for a second layer of defense.
Frequently asked questions
Are these passwords safe to use?
Yes. Passwords are generated in your browser using the cryptographically secure crypto.getRandomValues API. They are never transmitted to a server, logged or stored — refresh the page and they are gone.
How long should my password be?
For most accounts, aim for at least 16 characters mixing upper and lower case letters, numbers and symbols. Longer is stronger — length matters more than complexity alone.
Should I use a different password for every account?
Yes. Reusing a password means one breach can unlock many accounts. Generate a unique password per site and store them in a reputable password manager.