Strong password generator
Generate a random, secure password to your specifications — pick the length (8 to 48 characters) and which character groups to include (uppercase, lowercase, digits, symbols). The password is created directly in your browser using a cryptographic random number generator and is never sent anywhere. Ideal for new accounts, database passwords, and API keys.
How the password generator works
The tool builds a character set from the groups you select and randomly picks individual characters from it until it reaches the requested length. The randomness does not come from the ordinary Math.random() function, but from the browser's cryptographic generator (crypto.getRandomValues), which is designed for security purposes and is unpredictable.
The character sets are deliberately stripped of visually confusable characters so the password can be transcribed from paper or screen without mistakes. Specifically, uppercase I and O, lowercase l and o, and the digits 0 and 1 are omitted. Available groups:
- Uppercase: A–Z without I and O
- Lowercase: a–z without l and o
- Digits: 2 3 4 5 6 7 8 9
- Symbols: ! @ # $ % ^ & * - _ = + ?
The longer the password and the more character groups you enable, the higher its entropy — the number of possible combinations an attacker would have to try.
How to use the password generator
- Use the slider to set the password length (we recommend at least 16 characters).
- Tick the character groups you want to use — the more, the better.
- Click Generate (or move the slider) for a new password.
- Use the Copy button to place the password on your clipboard and paste it into a form.
Example output at length 20 with all groups enabled:
| Settings | Sample output |
|---|---|
| 20 chars, everything on | 7kP$mR2xW@qF4nT#eL9v |
| 12 chars, letters and digits only | Qm7Rk9Wp3Ky (no symbols) |
Each click creates a completely new, non-repeating password — nothing is stored anywhere.
What the password generator is good for
A strong, unique password for every account separately is the foundation of digital security — if one leaks, the others stay safe. The tool is invaluable when creating new accounts, generating passwords for databases and servers, producing API keys, or temporary access for colleagues.
Because the entire calculation runs locally and the password never leaves your browser, there is no risk of it being intercepted over the network — unlike online generators that send the password to a server. Ideally save the generated password in a password manager so you don't have to memorize it or write it on paper. For the most sensitive accounts, combine a strong password with two-factor authentication.
FAQ
Is the generated password really secure?
Yes. The password is created using the browser's cryptographic random number generator (crypto.getRandomValues), which is designed for security purposes and is unpredictable. A password's security further increases with its length and the number of character groups used.
Is the password sent anywhere over the internet?
No. All computation happens exclusively in your browser (in JavaScript on your device). The password is never sent, stored, or logged — once you close the page, no trace remains anywhere.
How long should my password be?
For ordinary accounts we recommend at least 16 characters; for sensitive ones (bank, email, password manager) 20 or more. A longer password has significantly higher entropy and is practically unbreakable by brute force.
Why are characters like 0, O, l, or 1 missing from passwords?
These characters are easily confused visually. The tool deliberately omits them so you can transcribe the password from screen or paper without error. This does not reduce security — the character set stays large enough.
Can I generate a password without symbols?
Yes. Just uncheck the symbols group. This helps where a system doesn't accept special characters. Compensate for the lost complexity with greater password length.
Will a different password be generated every time?
Yes. Every click on Generate and every change to the length creates a completely new, random password. Two identical passwords in a row are practically impossible at a reasonable length.
How am I supposed to remember the generated password?
Strong random passwords can't be memorized, and they shouldn't be — save them in a password manager, which encrypts them securely and fills them in for you. You then only need to remember one master password.
Can I use the tool for API keys and tokens?
Yes. It works well for random secret strings — choose a longer password (32+ characters). For standardized identifiers, however, our UUID generator is a better fit.
📅 Last updated: 11 July 2026