Is this generator secure?

Yes. It uses crypto.getRandomValues — the Web Crypto API's CSPRNG. Not Math.random, which is not secure.

Do you log or store the passwords?

No. Generation happens in your browser. Nothing is sent to a server.

How long should my password be?

16+ characters with mixed types is recommended. 20+ for high-value accounts. Use a password manager for long random passwords.

Why are random passwords better than memorable ones?

Memorable passwords reuse patterns attackers already know (substitutions, dictionary words, dates). Random passwords from a CSPRNG have no predictable structure, so brute-force is the only attack — and a 16-char random password is computationally infeasible to crack.

When should I use a passphrase instead?

Use a passphrase (5–7 random unrelated words) when you must memorize a password — like the master password for your password manager or a device unlock code. For everything else, use stored random passwords.

Password Generator

Developer Tools· 30 tools

Free secure password generator. Uses the browser's cryptographically-secure random generator (crypto.getRandomValues). Customize length, include/exclude uppercase, lowercase, digits, symbols, and avoid ambiguous characters.

Select at least one character set to generate a password

Frequently Asked Questions

References

Digital Identity Guidelines (NIST SP 800-63B) — NIST

Related Tools

Hash Generator
Generate SHA-1, SHA-256, and SHA-512 hashes from any text. Results update live as you type — runs via Web Crypto API, data stays in your browser.
UUID Generator
Generate random UUID v4 identifiers instantly. Choose uppercase or lowercase, with or without hyphens. Uses the browser's secure crypto API.
Base64 Encoder / Decoder
Encode text to Base64 or decode Base64 back to plain text. Supports full UTF-8 including emoji. Runs in your browser — data never leaves your device.

Frequently Asked Questions

References and sources

Related Tools