Strong, random passwords — right here.
Pick a length and character sets, then generate. Built with a real cryptographic random source, entirely in this tab — nothing typed or generated here is ever sent anywhere.
Good to know
Is this actually random and secure?
Yes. Every character is chosen usingcrypto.getRandomValues(), the browser's built-in cryptographically secure random number generator — the same kind of source password managers use, not Math.random(), which is fast but predictable and not safe for anything security-sensitive. We also use rejection sampling so every possible character is equally likely, with no bias toward any part of the alphabet.
Are my passwords stored or sent anywhere?
No. Generation happens with JavaScript running in your browser tab. Nothing is uploaded, logged, or saved — refresh the page and the password is gone unless you copied it somewhere yourself.
How is the strength label calculated?
It's a straightforward entropy estimate: log₂(pool size) × length, based on the character sets you've enabled and how long the password is. It reflects the real math for a uniformly random string from that alphabet — it isn't a fake meter, but it also can't know how or where you'll use the password, so treat it as a rough guide rather than a guarantee.
Why enable more character sets?
Each additional character set (uppercase, lowercase, numbers, symbols) widens the pool of possible characters at each position, which increases entropy for the same length. Longer is generally more effective than adding more sets, but combining both gives the best result.