100% Private — Passwords are generated in your browser. Nothing is ever stored or transmitted.
Security Tools

Password Generator

Generate cryptographically secure random passwords using your browser's built-in crypto.getRandomValues() API. No random number generator can be predicted. Choose length, character sets, and constraints — then generate a single password or a batch of up to 100.

Passwords are generated locally. Nothing is stored or transmitted.
Click Generate
Strength
Entropy: bits  ·  Charset size:  ·  Crack time:
Password Length
20
Character Sets
Exclude Characters
Requirements
Password Length Guide
LengthUse CaseEntropy (full charset)Verdict
8Legacy systems with strict limits~52 bitsWeak
12Minimum recommended~78 bitsFair
16Standard accounts~105 bitsStrong
20Email, banking, primary accounts~131 bitsVery Strong
32+Master passwords, encryption keys~210+ bitsExcellent

Frequently Asked Questions

How does this generator ensure randomness?

It uses crypto.getRandomValues() — the browser's cryptographically secure PRNG backed by your OS entropy pool — not Math.random().

Is my generated password stored or transmitted?

No. Passwords are generated entirely in your browser. Nothing is sent to any server, and nothing is stored after you close the tab.

What password length should I use?

16 characters minimum for standard accounts. Use 20+ for email, banking, and recovery accounts.

What is the difference between a password and a passphrase?

A password is a random character string. A passphrase is a sequence of random words — easier to memorise with comparable entropy. Use our Passphrase Generator for passwords you need to remember.