Password Generator

Strong passwords, made properly

A password generator is only useful if the randomness is real. This one uses crypto.getRandomValues, the browser’s cryptographic random source, not Math.random.

Everything happens on your device. Nothing is sent to a server, which means nothing can be logged, sold or leaked.

How to generate a password

1. Set the length. Sixteen is a sensible minimum.
2. Choose the character sets: lowercase, uppercase, digits, symbols.
3. Exclude characters that cause trouble in your system, such as 0, O, l or 1.
4. Press generate and copy.

Length beats complexity

A 16 character password using only lowercase letters has more combinations than an 8 character password using every symbol on the keyboard. Modern cracking tools work through short passwords first, no matter how complex they look.

For important accounts, use 20 characters or a four word passphrase. For a site you will never use again, 16 random characters is plenty.

What actually keeps accounts safe

• Use a manager. One strong master password, unique random passwords everywhere else.
• Turn on two factor authentication. A password alone is not enough in 2026.
• Never reuse. One breach should not unlock five other accounts.
• Check breach exposure. If a service you use reports a breach, change that password immediately.

A warning about symbols

Some systems silently strip or reject characters like <, >, & or quotes. If a generated password fails on a signup form, regenerate with fewer symbol types rather than weakening the length. Length is the part that matters.

When you need to store a value inside a URL or a config file, Base64 Encoder handles the encoding step. To check a value’s fingerprint, Hash Generator produces a one way digest.