Random Password Generator

About Random Password Generator

Reused or predictable passwords are the single biggest factor behind account takeovers — once one leaked password is tested against other sites, every account sharing it becomes vulnerable too. A strong, unique password per account is the simplest defense, but coming up with genuinely random ones by hand is exactly the kind of task humans are bad at, since our brains gravitate toward patterns.

This tool generates cryptographically random passwords using your browser's built-in secure random number generator (`crypto.getRandomValues`), never `Math.random()`, which isn't suitable for security purposes. Adjust the length from 6 to 64 characters, and toggle uppercase letters, numbers, and symbols on or off to match whatever a specific site's password rules require.

The entropy estimate shown alongside each password reflects the actual mathematical randomness of the result — how many possible passwords could have been generated with the same settings — which is a more meaningful strength measure than arbitrary rules like 'must contain a number.' Higher entropy means a password is harder to guess through brute force, regardless of what specific characters it happens to contain.

This is useful for creating a new account password, replacing a weak or reused password flagged by a password manager's security check, generating a passphrase for sensitive systems, and general password hygiene — the strongest approach remains a unique, randomly generated password per account, stored in a password manager.

How it works

1. Adjust length and character types. Length from 6-64 characters; toggle uppercase, numbers, and symbols.
2. A password generates automatically. Using your browser's cryptographically secure random generator.
3. Copy and use it. Store it immediately in a password manager — nothing is saved here.