Generate Passwords That Actually Resist Attacks
Weak, reused, or predictable passwords are one of the most common ways accounts get broken into. This tool generates a random password by combining uppercase and lowercase letters with numbers and symbols, in a sequence nobody could guess or reverse-engineer from a pattern.
Set the length and toggle which character types to include — a new password is generated automatically every time you change a setting. Click the copy button to grab it, or the refresh icon to get a different one without changing your settings.
How is this password actually generated?
Every character is picked using the browser's Web Crypto API
(crypto.getRandomValues), not Math.random(). That distinction
matters: Math.random() is a fast, predictable pseudo-random generator never
intended for security purposes, while the Web Crypto API draws from your operating
system's cryptographically secure random number source — the same kind used to generate
encryption keys. Nothing about the password, or the settings you chose, ever leaves your
browser.
What length and character types should I use?
Longer is stronger — each additional character multiplies the number of guesses an attacker would need to try. 20 characters (the default here) comfortably clears most sites' requirements and is long enough that brute-forcing it isn't practical. Leave numbers and symbols turned on unless a specific site rejects them; a wider character set means more possible combinations for the same length.
What makes a password truly strong?
Three things: length, character variety, and genuine randomness. Security guidance generally recommends at least 12 characters, with 16 or more preferred. It should mix uppercase, lowercase, numbers, and symbols, and — critically — it can't be based on a dictionary word, a name, or a predictable pattern like "Password1!", since those are the first things an attacker's cracking tool tries. A password assembled from cryptographically random characters, like the one above, sidesteps all of that by construction.
Related tools
- UUID Generator — generate cryptographically random unique identifiers, built the same way.
- Random Number Generator — for everyday randomness (games, raffles) that doesn't need cryptographic security.
Last reviewed: August 2026