Password Generator
Generate strong, random passwords with cryptographically secure randomness (crypto.getRandomValues). Everything runs in your browser — no password is ever sent over the network.
How strong is strong enough?
Modern password-cracking rigs can guess weak passwords in seconds. As a rule of thumb, aim for at least 60 bits of entropy for general accounts and 80+ bits for high-value accounts (email, banking, password manager master password). A random 16-character password using uppercase, lowercase, digits, and symbols gives roughly 105 bits — effectively uncrackable with current technology.
Don't reuse passwords. Use a password manager (Bitwarden, 1Password, Proton Pass) to store unique, strong passwords for every account. Pair this with two-factor authentication wherever it's offered.
Privacy: how this tool works
Passwords are generated locally in your browser using the Web Crypto API (crypto.getRandomValues), the same source of randomness used for cryptographic keys. No password is ever transmitted to our servers, logged, or stored. You can verify this by opening your browser's Network tab and clicking "Generate" — there will be zero requests.
More privacy tools
Strong passwords protect your accounts; a VPN protects your network traffic. See our top VPN picks for privacy.