Password Generator
Free · no signup · runs entirely in your browser
Open the tool →A password generator that makes a random password and then, crucially, does nothing else with it. No account, no email, no "save to our secure vault" upsell. You press Generate, you get a password, you copy it, you leave.
Set the length anywhere from 4 to 64 characters with the slider — it starts at 16, which is a sensible default for most things. Four checkboxes control what goes into the mix: uppercase (A-Z), lowercase (a-z), numbers (0-9), and symbols (!@#$%^&*()_+-=[]{}|;:,.<>?). All four are on to begin with. Untick them as needed, though if you untick all four the tool will simply tell you to pick at least one, because a password made of nothing is not a password.
The randomness comes from the Web Crypto API — crypto.getRandomValues, the browser's cryptographically secure random number generator. Not Math.random, which is fine for shuffling a playlist and genuinely unsuitable for anything guarding your bank. This distinction matters more than most password generators admit, and plenty of them get it wrong.
There's a strength meter under the output that rates what you generated as WEAK, MEDIUM or STRONG based on how long it is and how many character classes you included. It is a rough guide, not a prophecy. A 6-character password with all four classes ticked is still a 6-character password.
Everything happens client-side. The generation runs in your browser tab, the password never leaves your machine, nothing is sent to a server, and nothing is stored anywhere. There is no server-side log to leak, because there is no server-side anything. Free, no signup, no tracking, no ads. Close the tab and it's gone — so copy it into your password manager first.
How to use it
- Drag the length slider to the number of characters you want, anywhere from 4 to 64.
- Tick or untick the uppercase, lowercase, numbers and symbols boxes to control the character set.
- Hit Generate, check the strength rating, then use the copy button to grab the result.
Worked example
Say a site caps passwords at 20 characters and rejects symbols — an irritating but common combination. Drag the slider to 20, untick SYMBOLS, and leave uppercase, lowercase and numbers ticked. Press Generate and you get something like qT7nRkP2wLxV9bMd4Hja. The strength meter reads STRONG: 20 characters across three classes is plenty, even without punctuation. Click copy, paste it into the signup form and into your password manager, then close the tab. Nothing about that password was ever transmitted.
FAQ
Is this password generator actually secure?
It uses the Web Crypto API (crypto.getRandomValues), the browser's cryptographically secure random source, rather than Math.random. The generated password stays in your browser and is never sent to or stored on a server.
How long should my password be?
16 characters with mixed character types is a solid default for most accounts, which is why the slider starts there. Go longer — up to 64 — for anything high-value like email, banking or a password manager master password.
Do you store or log the passwords you generate?
No. Generation happens entirely client-side in your browser tab, so there is nothing to log. Once you close the tab the password is gone unless you copied it somewhere.
Why does it say to select at least one character type?
If all four checkboxes are unticked there are no characters available to build a password from. Tick at least one of uppercase, lowercase, numbers or symbols and it will generate normally.
Open the Password Generator →