Secure Random Password Generator
Passwords are generated in your browser using the Web Crypto API. Nothing is transmitted or stored.
How it works
Randomness comes from crypto.getRandomValues, a cryptographically secure source, with rejection sampling so every character is equally likely (no modulo bias).
Length matters more than complexity: a random 20-character password from 70 symbols has about 122 bits of entropy, far beyond any realistic brute-force attack. Use a password manager so you never need to remember it.
Frequently asked questions
Is this password generator safe?
Yes. Generation happens entirely in your browser and nothing is sent to a server. You can verify this by disconnecting from the internet and it will still work.
How long should a password be?
At least 16 random characters for important accounts. For a password manager master password, use a long passphrase.
Should I include symbols?
Symbols add entropy per character, but a longer password gives the same strength. Some sites reject certain symbols, in which case just increase the length.