Strong Password Generator
Create genuinely random passwords using your browser cryptographic random number generator. Nothing is sent anywhere, logged, or kept after you close the page.
Passwords are generated by crypto.getRandomValues, the same cryptographically secure source your browser uses for TLS. Nothing is transmitted, logged or stored — reload the page and they are gone.
Frequently Asked Questions
How long should a password be?
Sixteen characters with mixed types gives around 100 bits of entropy, which is beyond any realistic brute-force attack. Twelve is a reasonable floor. Length matters far more than exotic symbols.
Are these passwords really random?
Yes. They come from crypto.getRandomValues, the same cryptographically secure source your browser uses for TLS keys, and the generator rejects biased values so every character is equally likely.
Is it safe to generate passwords on a website?
On this one, yes — the generation happens entirely in JavaScript on your device, and the page makes no network requests with the result. That said, a dedicated password manager is the better habit, because it also stores them safely.
What does entropy mean here?
It measures how many guesses an attacker would need. Each bit doubles the work: 50 bits is weak against a determined attacker, 75 is strong, and 100 or more is effectively unbreakable with current technology.