Password Generator
Generate strong, random passwords right in your browser. Tune the length and character types, and copy a fresh password in one click. Nothing is ever sent anywhere.
crypto.getRandomValues with rejection sampling for unbiased randomness. Nothing is uploaded, stored, or logged.About the Password Generator
The Password Generator creates strong, random passwords using your browser's built-in cryptographically secure random number generator (crypto.getRandomValues), not the predictable Math.random. It's built for anyone who needs trustworthy credentials fast: developers, sysadmins, and everyday users setting up new accounts. Everything runs entirely on your device, so your passwords are never sent, logged, or stored anywhere.
How it works
- Pick a length between 4 and 64 characters and toggle which character sets to include: uppercase, lowercase, numbers, and symbols (at least one set always stays on).
- Your browser uses crypto.getRandomValues with rejection sampling to pick each character without statistical bias, then displays the result along with a strength rating of Weak, Fair, Good, or Strong.
- Copy the password with one click, or hit Regenerate to instantly produce a fresh one. No data ever leaves your device.
Features
- Cryptographically secure randomness via crypto.getRandomValues with rejection sampling to avoid character bias.
- Adjustable length from 4 to 64 characters with independent toggles for uppercase, lowercase, numbers, and symbols.
- Live strength meter that rates each password Weak, Fair, Good, or Strong.
- One-click Copy and Regenerate for fast, repeatable workflows.
- 100% client-side and free with no signup. Passwords are generated locally and never transmitted or saved.
Frequently asked questions
Are these passwords truly random and safe?
Yes. The tool uses your browser's crypto.getRandomValues, a cryptographically secure random number generator designed for security-sensitive use. It also applies rejection sampling so every allowed character is equally likely, avoiding the subtle bias you'd get from a naive modulo approach. This is far stronger than Math.random, which is not safe for passwords.
Is my password sent to a server?
No. All generation happens locally in your browser. Nothing is uploaded, logged, or stored on any server, and the tool requires no account or signup.
How long should my password be?
Longer is stronger. For most accounts, aim for at least 16 characters; for high-value accounts use 20 or more. Length adds far more security than complexity, so when in doubt, increase the length before anything else.
Should I include symbols?
Generally yes. Adding symbols increases the number of possible combinations and makes a password harder to guess. If a particular site rejects certain symbols, you can turn them off and compensate by increasing the length.
Can two people get the same password?
It's effectively impossible for any reasonable length. With a secure random source and a large character set, the number of possible passwords is astronomically high, so two independent generations realistically never collide.