🔐 Password Generator
Generate strong, random passwords. Everything runs in your browser — nothing is sent anywhere.
How this password generator works
This tool builds passwords using your browser's cryptographically secure random number generator (the Web Crypto API), not the weak Math.random(). Your password is created entirely on your device — it is never transmitted, logged, or stored anywhere.
What makes a strong password?
- Length first. Every extra character makes a password exponentially harder to crack. Aim for 16 or more.
- Mix character types. Combining upper- and lower-case letters, numbers, and symbols enlarges the search space.
- Make it unique. Never reuse passwords across sites — one breach shouldn't unlock everything.
- Use a password manager. Strong passwords are only practical if you don't have to remember them all.
Security tips
Pair strong passwords with two-factor authentication wherever it's offered, and prefer SSH key authentication over passwords for server access. For locking down a server, see our guide on configuring a Linux firewall.
Frequently asked questions
Is this password generator safe to use?
Yes. Every password is generated locally in your browser using the Web Crypto API's secure random source. Nothing is sent over the network, logged, or saved — you can even disconnect from the internet and it will still work. Once you close the tab, the password is gone unless you save it.
How long should my password be?
Aim for at least 16 characters for everyday accounts and 20 or morefor anything sensitive like email or banking. Length is the single biggest factor in resistance to brute-force attacks — a long, simple passphrase usually beats a short, complex string.
Do I really need symbols and numbers?
They help by enlarging the pool of possible characters, so include them where a site allows it. But don't sacrifice length for complexity: a 20-character password of just letters is far stronger than an 8-character one crammed with symbols.
What's the difference between a password and a passphrase?
A passphrase strings several random words together (like correct-horse-battery-staple). It's long, easier to remember, and very strong. A generated random password is denser but harder to memorize — which is why pairing either with a password manager is the best real-world approach.