Password generator

Generate a random password and choose its length and allowed character types. The generator runs locally in your browser and uses the Web Crypto API.

• Specify length: Choose a password length from 1 to 128 characters, allowing you to create anything from short, memorable passwords to long, highly secure ones.
• Include numbers: Add digits (0–9) to strengthen your password. Useful for making it more complex and less susceptible to basic brute-force attacks.
• Include uppercase letters: Including uppercase characters (A–Z) adds complexity to your password, making it harder to guess. This option is helpful for meeting security requirements that call for mixed case.
• Include lowercase letters: Lowercase letters (a–z) are a common component of passwords. A mix of upper and lower case increases variability.
• Include symbols: Add non-alphanumeric characters, making your password more secure and harder to crack. Symbols are recommended for passwords protecting sensitive data.
• Exclude ambiguous characters: By default, ambiguous characters like “il1Lo0O” are excluded to avoid confusion. This setting can be helpful when readability and accuracy matter, such as when manually entering passwords.

Why randomised passwords are important

Randomised passwords are essential for ensuring strong security in the digital world. Predictable or easily guessed passwords (such as password123 or abc123) are vulnerable to hacking techniques like brute-force attacks, where attackers try many common passwords until they succeed. By generating randomised passwords, you can protect yourself from such attacks because each password is completely unique and does not follow any predictable pattern. When passwords include a mix of random numbers, letters (both uppercase and lowercase), and symbols, they become exponentially harder to crack. This reduces the risk of unauthorised access to your accounts and sensitive data. The options to limit the amount of variation are provided for specific scenarios.

• Short passwords: For less critical logins, such as online forums, you might opt for shorter passwords (e.g. 8–12 characters) with a combination of numbers and letters.
• Long passwords: For highly secure systems, like banking or server logins, using a longer password (20+ characters) with symbols and mixed case letters can offer more protection.
• No symbols: Some systems may not allow special characters. In such cases, you can turn off symbols while still creating a strong password with numbers and both upper and lowercase letters.
• No ambiguous characters: If you’re prone to mistyping or want to avoid confusion, especially when manually entering a password, excluding ambiguous characters ensures clarity.

While randomised passwords are effective, they can be difficult to remember, especially if you’re using a unique password for each account, which is highly recommended. A password manager is a tool that securely stores and manages all your passwords in one place. With a password manager, you only need to remember one master password, and the software will handle the rest, automatically filling in your login credentials for different websites and services. Password managers not only make your life easier but also significantly enhance your security by allowing you to use long, random, and complex passwords for every account without the need to remember them all.

Security and privacy

It’s important to note that this website does not store or retain any of the passwords generated. The passwords are created locally on your device using your browser, meaning they are never transmitted to our servers. You can generate passwords with confidence, knowing that your security is in your hands.

How passwords are generated

The generator selects characters with crypto.getRandomValues(). Length and enabled character sets determine the possible search space. Selecting a character set makes its characters available, but the current generator does not guarantee that every generated password contains at least one character from each enabled set. Generate again or inspect the result if a policy requires that.

Avoiding ambiguous characters removes lookalikes and reduces the character pool slightly. Website-specific length and symbol rules still apply. The password is generated locally and is not stored by the widget; the selected options are stored in localStorage.

Related tools

• Password strength checker: Check the strength and security of passwords with this strength checker. Get detailed feedback on password quality, entropy, and security recommendations.

Further reading

• Wikipedia: Password
• Wikipedia: Password strength
• Wikipedia: Brute-force attack

Widget made with staark