How password generator works
This generator creates passwords using the Web Crypto API's cryptographically secure random number generator (crypto.getRandomValues), not JavaScript's Math.random. That means each character is chosen from your selected sets with uniform randomness, making the output suitable for protecting real accounts.
You control the length (6–64 characters) and which character classes to include: uppercase letters, lowercase letters, digits, and symbols. To guarantee every character class you selected actually appears, the generator draws from the combined pool — and a strength indicator estimates how resistant the result is to brute-force attacks based on length and variety.
Everything happens locally in your browser. The password never leaves your device, is never transmitted, and is never stored. For best security, use a length of at least 16, enable all four character classes, and store the result in a reputable password manager rather than reusing it across sites.
Frequently asked questions
Is this password generator safe to use?
Yes. It uses your browser's cryptographically secure random number generator (Web Crypto API), so the passwords are unpredictable and suitable for real accounts. Nothing is sent over the network — generation happens entirely on your device.
How long should my password be?
Aim for at least 16 characters for important accounts. Longer is exponentially stronger: each extra character makes a brute-force attack vastly harder. Enable all character classes (uppercase, lowercase, numbers, symbols) for maximum variety.
Are the passwords stored or sent anywhere?
No. The generator runs entirely in your browser. The password is never transmitted, logged, or stored. Once you copy it and close the page, it's gone — keep it somewhere safe like a password manager.
What makes a password strong?
Length and unpredictability. A long password with a mix of character classes is strongest. Avoid dictionary words, personal information, and reused passwords. The strength label reflects both length and the number of character types enabled.