SECURITY

Password Generator

Create strong random passwords in your browser. They are made with the Web Crypto API and are never sent to a server or stored.

Include

Not generated yet

How to use the Password Generator

Choose a length and which kinds of characters to include, then press Generate. Each new password is created fresh; the tool guarantees at least one character from every group you tick, then shuffles them so the positions are unpredictable.

Length matters more than complexity. A 16-character password using all four groups has roughly 104 bits of entropy, which is far beyond what guessing attacks can reach. Save the result in a password manager rather than reusing it across sites.

Examples and uses

Limitations and good to know

The entropy figure assumes every character is picked at random from the selected set, which is how this tool works. It does not apply to passwords you invent yourself. If your browser does not support the Web Crypto API, the tool refuses to generate anything rather than fall back to weaker randomness. Copying relies on your browser’s clipboard, and clipboard history tools may keep a copy, so clear it if you are on a shared computer.

Frequently asked questions

Are generated passwords stored or sent anywhere?

No. They exist only in this page and disappear when you close or reload it.

How random is it?

It uses crypto.getRandomValues, the browser’s cryptographically secure generator, with rejection sampling so no character is favoured.

What length should I choose?

At least 12 characters for ordinary accounts and 16 or more for important ones such as email, banking and your password manager.

Related tools

Looking for something else? Browse all free online tools on the ToolBox Free Hub homepage.