Password Generator
Generate strong, random passwords with configurable length and character types.
About this tool
This tool generates cryptographically secure random passwords using the browser Web Crypto API (window.crypto.getRandomValues). Cryptographic randomness is essential for passwords — Math.random() is not secure enough.
Creating strong passwords for new accounts, generating service account credentials, creating API keys and secrets, bulk password generation for user onboarding, and testing password strength requirements.
Frequently asked questions
How is this different from Math.random()?
This tool uses window.crypto.getRandomValues(), a cryptographically secure random number generator (CSPRNG). Math.random() is predictable and must never be used for security purposes.
How long should my password be?
NIST SP 800-63B recommends at least 8 characters minimum, but 16+ characters with mixed types is the practical standard. Each additional character exponentially increases crack time.
Are my passwords stored anywhere?
No. Everything runs in your browser. No password is ever sent to a server. You can verify this by disconnecting from the internet — the tool still works perfectly.