Password Generator
Use this free online Password Generator to create strong, random passwords for any account. It is useful for generating credentials when signing up for new services, replacing reused passwords during a security clean-up, building shared service-account credentials, or producing a one-off password for a guest Wi-Fi network. Pick a length, choose which character classes to include, and the tool produces a fresh password every click. Generation uses the browser's Web Crypto API, which is the same cryptographically secure source of randomness used by HTTPS — strong enough for real account credentials. Nothing is transmitted. Pair the generator with a password manager so you never have to memorise the result.
Tips for a Strong Password
Use at least 12 characters, mix uppercase and lowercase letters with numbers and symbols, never reuse passwords across accounts, and store them in a reputable password manager. The longer the password, the harder it is to brute-force.
How to Use This Password Generator
Generating a password is one slider and one click.
- Set the desired password length using the slider — 16 characters is a good default; 20+ for high-value accounts.
- Tick the character classes to include — lowercase, uppercase, numbers, symbols.
- Optionally tick 'exclude similar' to remove visually confusing characters like 0/O and 1/l.
- Click Generate Password — every click produces a fresh password.
- Click Copy to copy the password to your clipboard, then paste it directly into your password manager.
Example
Asking for a 20-character password with all four character classes (lowercase, uppercase, numbers, symbols) and the "exclude similar" option might return a string like k7Q@vRyMXt3#bN2$Lpf!. With ~94 possible characters per slot and 20 slots, that's roughly 131 bits of entropy — strong enough that even a fast offline attacker testing 10 billion passwords per second would need on the order of 10²⁹ years to brute-force it. Always paste the result straight into your password manager rather than memorising it.
How This Password Generator Works
Strong passwords have two properties: enough length to resist brute force, and enough randomness to resist dictionary attacks. The generator uses the browser's crypto.getRandomValues() API rather than Math.random(). The difference matters: Math.random() is fine for shuffling a deck of cards but is statistically predictable to an attacker who has captured a handful of outputs; crypto.getRandomValues() is backed by the same operating-system cryptographically secure pseudo-random number generator that powers HTTPS and would take longer than the age of the universe to brute force. The generator builds a character pool from the classes you ticked (lowercase, uppercase, numbers, symbols), draws a random index from that pool for each character of the password, and ensures at least one character from every selected class appears in the result so a system that requires 'one number and one symbol' will accept it. The 'exclude similar' option removes visually confusing characters (0, O, 1, l, I) at the cost of a slightly smaller pool, which is worth doing when the password may need to be retyped from a printout. Output never leaves the browser — there is no logging, no transmission and no recovery. Always paste the generated password into a password manager so you do not have to memorise it.
Last updated: May 2026.
Frequently Asked Questions
How long should my password be?
12 characters is a reasonable minimum for most accounts. 16+ is recommended for important accounts (email, banking, password manager). Some sites cap length at 32 — use the maximum allowed.
Are these passwords truly random?
Yes — the generator uses your browser's cryptographic RNG. Each character is independently sampled from the chosen character set.
Why exclude similar characters?
Some characters (l, 1, I, 0, O) look alike in many fonts and are easy to mistype when copying manually. Exclude them if you ever need to read passwords aloud.
Should I use symbols?
Yes — they expand the character set and harden the password. Some sites disallow certain symbols, so generate with all symbols and remove offending characters if needed.
Should I memorise my passwords?
No — use a password manager. Memorise only your master password (a long passphrase) and let the manager handle the rest.