Password Generator
Password Generator is a free security tool that runs directly in your browser with no account required.
About this tool
Generate a random password from 8 to 64 characters, with or without symbols, using the browser's cryptographically secure random source. Each result comes with an entropy estimate in bits, a strength label, and warnings if any weakness patterns appear.
How to use
- Set the desired Length (8 to 64 characters).
- Choose Yes or No for Include symbols.
- Copy the generated password and review its entropy and strength metrics.
Frequently asked questions
How is the password generated?
With crypto.getRandomValues, the browser's cryptographically secure random number generator, drawing from letters and digits plus an optional symbol set. It is not derived from timestamps or Math.random.
Is the password sent over the network?
No. Generation happens locally on your device and the password is never transmitted, logged, or stored by the site. Copy it straight into your password manager.
What does the entropy number mean?
Bits of entropy estimate the search space an attacker faces: each additional bit doubles it. Roughly 60+ bits resists casual attacks and 80+ bits is strong for most purposes; longer passwords raise entropy fastest.
Which symbols can appear?
When symbols are enabled, characters from the set !@#$%^&*()-_=+[]{};:,.? may be included alongside upper- and lowercase letters and digits.
Should I use 16 characters or more?
16 random characters with symbols gives well over 100 bits of entropy, which is ample. Go longer for high-value accounts or where the service may use weak password hashing.
Why does a generated password sometimes show a warning?
The analyzer flags cosmetic patterns like a coincidental repeated character. Because the password is random, these do not meaningfully reduce security; regenerate if it bothers you.