Password Generator

Generate cryptographically secure random passwords with customizable strength

Choose password length between 8 and 128 characters

Character Types

What is a Password Generator?

A password generator creates strong, random passwords using cryptographically secure methods. Unlike human-created passwords, generated passwords are truly random and resistant to dictionary attacks, brute-force attempts, and pattern-based guessing. This tool uses your browser's Web Crypto API to ensure maximum security and randomness.

How to Use

  1. Adjust the password length slider (8-128 characters)
  2. Select which character types to include (uppercase, lowercase, numbers, symbols)
  3. Click "Generate Password" to create a secure password
  4. Review the strength indicator to ensure adequate security
  5. Click "Copy Password" to copy to your clipboard

Example

Configuration:

  • Length: 16 characters
  • All character types enabled

Generated password:

K9$mP2@xL5#nQ8&r

Strength: Strong (104 bits of entropy)

Password Strength Explained

  • Weak: Short passwords with limited character types. Vulnerable to brute-force attacks.
  • Fair: Moderate length with some character diversity. Acceptable for low-security accounts.
  • Good: Decent length with multiple character types. Suitable for most online accounts.
  • Strong: Long passwords with all character types. Recommended for important accounts.
  • Very Strong: Maximum length with full character diversity. Ideal for critical systems.

Understanding Entropy

Entropy measures password randomness in bits. Higher entropy means more possible combinations and stronger security. A password with 80 bits of entropy would take billions of years to crack with current technology. Aim for at least 60 bits for personal accounts and 80+ bits for sensitive systems.

Best Practices

  • Use at least 12 characters for personal accounts, 16+ for sensitive accounts
  • Enable all character types (uppercase, lowercase, numbers, symbols) for maximum strength
  • Use unique passwords for every account—never reuse passwords
  • Store passwords in a password manager rather than writing them down
  • Change passwords immediately if you suspect a breach
  • Avoid common patterns like "Password123!" even if they meet length requirements

Character Types

  • Uppercase Letters (26 chars): A-Z
  • Lowercase Letters (26 chars): a-z
  • Numbers (10 chars): 0-9
  • Symbols (28 chars): !@#$%^&*()_+-=[]|;:,.?

Total character set with all types: 90 characters. More character types = exponentially more possible combinations = stronger passwords.

Technical Notes

This tool uses the Web Crypto API's crypto.getRandomValues() method, which provides cryptographically secure random numbers. This is far superior to Math.random() and ensures passwords are truly unpredictable. All password generation happens entirely in your browser—no data is transmitted to any server.

Privacy Notice

All password generation happens entirely in your browser. Generated passwords are never transmitted to any server or stored anywhere. Once you close or refresh this page, the password is gone unless you've copied it elsewhere.