Random Password Generator

The single most useful thing you can do for your online security is give every account its own password. That's only practical if creating one takes a couple of seconds — which is exactly what a generator is for.

How it works

• Characters are drawn using crypto.getRandomValues(), the browser's secure random source.
• Rejection sampling removes modulo bias, so every character is equally likely.
• One character is guaranteed from each selected set, then the whole string is shuffled.
• Passphrases pick whole words at random from a curated list and optionally slot a number in.

Strength is then measured the same way as our Password Strength Checker: entropy = length × log₂(pool size).

A worked example

A 16-character password using all four character types draws from a pool of 95, giving about 105 bits of entropy — beyond the reach of any realistic brute-force attack. A four-word passphrase from a 48-word list is weaker on paper but far easier to type on a phone or TV, which is the right trade-off for the two or three passwords you actually have to remember.

How to interpret your result

Aim for 60 bits or more for everyday accounts and 80 or more for anything holding money, email or other credentials. If the estimated crack time reads in centuries, you have more than enough — extra length beyond that protects against future hardware rather than today's.

Common real-world uses

• Creating a unique password for a new account.
• Replacing a password after a breach notification.
• Generating a memorable passphrase for a device or master password.
• Producing Wi-Fi keys and shared credentials that are easy to read aloud.
• Creating temporary passwords for onboarding new team members.

Related tools: Password Strength Checker · UUID Generator · Base64 Encoder / Decoder · JSON Formatter & Validator