Password Generator
A strong, random password from a cryptographically secure source. Never stored, transmitted, or logged.
Generated passwords are never stored, transmitted, or logged — nothing about them is kept once you leave this page.
What this tool does
Password Generator creates random passwords from the character sets you choose — uppercase, lowercase, numbers, symbols — at a length you pick from 8 to 64 characters. It's built for the ordinary need to generate a strong, unique password for a new account without reusing one, without a pattern, and without anything about it being predictable.
A password is ready as soon as the page loads, and adjusting length or character types generates a new one immediately.
How to use it
Set the length with the slider and toggle which character types to include — at least one has to stay checked. A password appears immediately and regenerates whenever you change an option. Press Generate again any time for a fresh one at the same settings.
Copy it with one click, or download it as a text file if you need to hand it off some other way.
Why nothing leaves your device
A password generator is one of the worst possible things to run through a server you don't control — the entire point is that nobody, including the tool itself, should ever know what it produced. A server-backed generator means the password crosses the network and potentially sits in a request log somewhere, which defeats the purpose before the password is even used.
Generation uses `crypto.getRandomValues()`, the Web Crypto API's cryptographically secure random source — never `Math.random()`, which isn't designed to be unpredictable and shouldn't be used for anything security-related. Nothing is sent anywhere, generated passwords are never stored, transmitted, or logged, and nothing about one is retained after you leave the page.
What this does well — and what it doesn't
This produces genuinely random passwords from a cryptographically secure source, with full control over length and character composition, which covers the overwhelming majority of "generate me a strong password" needs — signups, resets, service accounts.
It doesn't check a password against breach databases or enforce a particular site's specific password rules (some sites reject certain symbols, or require a minimum of each character class) — if a generated password gets rejected, regenerate or adjust the character-type options. And it has no memory: closing the tab or navigating away loses the password permanently, by design, so save it somewhere (ideally a password manager) before you leave.