Random Password Generator

Generate passwords with cryptographically secure randomness; mix cases, digits, and symbols.

What this tool does

Generates random passwords of a chosen length and character set (upper/lowercase, digits, symbols). Randomness comes from the browser's crypto.getRandomValues — an operating-system-grade cryptographically secure random source. That is a different class entirely from Math.random, which is predictable and must never be used for passwords. Generation is offline; passwords never leave your device.

What makes a password strong

Strength is entropy, and entropy comes mostly from length, then from character variety. A 16-character lowercase-only password (~75 bits of entropy) is orders of magnitude harder to crack than an 8-character password with symbols (~52 bits). Practical guidance: at least 16 characters for important accounts, 20+ where allowed, and a unique password per site so one breach does not cascade.

Recommended setup

Nobody memorizes dozens of strong random passwords, so the workable pattern is: generate randomly, store in a password manager, protect with a strong master password, and enable two-factor authentication on important accounts. If you ever need to copy a password by hand, regenerate without ambiguous characters like l, 1, I, O, and 0.