About this tool
Strong random passwords with a visual strength meter.
The Password Generator creates cryptographically random passwords using the browser's Web Crypto API (crypto.getRandomValues()). Choose the length (4–128 characters) and include any combination of uppercase letters, lowercase letters, digits and symbols. The strength meter evaluates the password's entropy in bits and shows a visual indicator.
Example
Settings: 16 characters, uppercase + lowercase + numbers + symbols
Example output: Xk#9mPqL2&nRvT7w — Strength: Very Strong (~104 bits entropy)
How to use
- Set the desired length (4–128 characters).
- Toggle uppercase letters, lowercase letters, numbers and symbols.
- Click Generate.
- Copy the password to clipboard.
Features
- 4–128 characters
- Uppercase, lowercase, digits, symbols
- Uses crypto.getRandomValues()
- Visual strength meter with entropy bits
- Bulk generation available
When to use this
Creating a unique, strong password for each website you register on — reusing passwords is the most common cause of account takeover.
Generating a temporary password for a new employee account, to be changed on first login.
Creating API keys, secret tokens, or webhook signing secrets for development or staging environments.
Setting strong access PINs or generating random strings for use as salts in custom hashing implementations.
Frequently Asked Questions
How random is the generated password?+
It uses crypto.getRandomValues() — the browser's cryptographically secure pseudo-random number generator (CSPRNG), suitable for security-sensitive use.
What makes a strong password?+
Length has the greatest impact. A 12-character password with all character types has about 79 bits of entropy — sufficient for most purposes. 20+ characters is very strong.
Is the generated password stored anywhere?+
No. Passwords are generated in your browser and never transmitted. Nothing is stored server-side.
What symbols are included?+
Standard symbols: ! @ # $ % ^ & * ( ) - _ = + [ ] { } | ; : , . < > ? / ` ~
Is the generated password ever transmitted or stored?+
No. The password is generated entirely in your browser using the Web Crypto API's getRandomValues(). Nothing is sent to any server. The password exists only in your browser tab.
What does the strength meter measure?+
Entropy in bits, calculated from the character set size and password length. 50+ bits is good; 80+ bits is very strong. A 16-character password using all character types has ~100 bits of entropy.
Should I use a passphrase instead of a random password?+
Passphrases (random words joined by spaces) are easier to remember and can reach the same entropy at a longer length. For passwords you must type regularly, a passphrase may be more practical.