How is the password generated?

Using crypto.getRandomValues(), your browser's cryptographically secure random number generator — the same class of randomness used for security tokens, not Math.random().

Is my generated password stored or sent anywhere?

No. It's generated and displayed entirely client-side and never transmitted — closing the tab is enough to make sure it's gone if you don't save it yourself.

What length should I use?

16 characters with all character types enabled is a solid default for most accounts. For high-value accounts, 20+ characters is safer, especially if the service allows a password manager to store it.

How is "time to crack" calculated?

It's an estimate based on the password's character pool and length, assuming an offline attacker guessing 10 billion passwords per second — a realistic worst case for a leaked, poorly-hashed database. Real-world time varies with how the service stores passwords.

Password Generator

Create strong, random passwords with custom length and character sets.

Processed 100% in your browser — nothing you enter here is ever uploaded.

Common use cases

Setting up a new service or database account

Generate a strong password on the spot when creating credentials you'll immediately save in a password manager.

Rotating a leaked credential quickly

Replace a compromised password with a fresh, high-entropy one the moment you notice a breach notice.

Creating a one-time shared password

Generate a temporary guest Wi-Fi or shared-account password that's easy to read aloud but still hard to guess.

How to use the Password Generator

Drag the length slider or type an exact number of characters.

Toggle uppercase, lowercase, numbers and symbols to control which characters can appear.

Enable "Exclude ambiguous" to drop easily-confused characters like I, l, 1, O and 0.

Click the refresh icon to generate a new password with the same settings, or copy the current one.