Create a strong, unique password in seconds. Choose its length, character types, and readability.
Generation happens entirely on your device. The browser obtains cryptographically suitable random values through its Web Crypto interface.
The password never leaves your browser. It is not transmitted or placed in history, cookies, or local storage.
Every extra random character multiplies the number of possible passwords by the size of the entire pool. More length therefore usually adds more protection than a short password filled with hard-to-remember substitutions.
A long random value remains strong even when a service imposes particular symbol rules. For important accounts, use a unique password of at least 16 characters and keep it safely in a password manager.
With this generator, yes: generation runs locally in your browser, and no result is sent to a server. The password appears only on your device and is not stored.
The essentials are sufficient length, genuine randomness, and exclusive use for a single account. Names, dictionary words, and predictable patterns are much easier to guess than a randomly generated value.
No. If one service is compromised, attackers may try the same password on your other accounts. A password manager can create and safely keep a different long password for every account.
This mode removes characters that look similar in many typefaces, such as the digit 1 and lowercase l. It makes a password easier to read and type manually, while reducing the character pool slightly.
For most accounts, 16 random characters are a good starting point. Choose 20 or more for especially important secrets or when fewer character types are allowed, provided the service supports that length.