Password Generator

Generate strong, random passwords. Choose length and which character classes to include. All generation happens locally in your browser — nothing is sent to a server.

PasswordSelect at least one character class
Strength:

Is this safe?

Yes. The password is generated entirely in your browser using the built-in crypto.getRandomValues API, the same source of randomness used by browsers for TLS. Nothing is sent to a server — you can verify this by opening developer tools and watching the network tab while you click "Generate new".

How long is long enough?

For most logins, 16 characters with all four character classes is comfortably beyond brute-force range. Use 20+ for anything sensitive (password manager master password, email account, financial accounts) — and turn on two-factor authentication wherever you can.