Secure Password Generator

About the Secure Password Generator

Generate a random password from the character sets you choose (upper case, lower case, numbers and symbols) at any length from 4 to 128 characters. Presets such as Strong 16, Ultra 32 and PIN 6 set the options for you, you can exclude look-alike characters, and the symbol set is editable.

Randomness comes from the browser's crypto.getRandomValues, with a method that avoids bias toward any character. If the browser has no secure random source the tool refuses to generate rather than fall back to a predictable one.

How to use it

1. Pick a preset, or set the length with the slider or the number box.
2. Choose the character sets, and tick Avoid Confusing Characters if people will read the password aloud.
3. Check the security level, press Copy Password, and store it in a password manager.

Worked example

The password itself is random on every run; the rating comes from length multiplied by log2 of the character pool size (here about 95 bits).

Length 16, upper case, lower case and numbers (62 possible characters)

Security Level: Very Strong

Common mistakes and gotchas

• Length matters more than variety. Each extra character multiplies the number of possibilities; a long password from fewer character sets can beat a short one with symbols.
• A PIN preset is short and numeric by design: a 6-digit PIN has about 20 bits of entropy, fine behind a lockout but weak for anything an attacker can try offline.
• Some sites reject certain symbols or limit length. Edit the symbol set or length to fit, rather than editing the password by hand, which lowers its randomness.
• The tool guarantees at least one character from every selected set, which is why a very short length with all four sets leaves little room for randomness.

Frequently asked questions