Password Generator
Build random passwords from the Web Crypto CSPRNG with rejection sampling — no modulo bias, and every character class you enable is guaranteed to appear.
About Password Generator
Randomness is the whole product here, so this is worth stating precisely: each character is drawn with crypto.getRandomValues using rejection sampling. That matters twice. JavaScript's Math.random is not a cryptographic generator — its output can be predicted from earlier output — and the common shortcut of taking `random() % pool.length` biases the low end of the alphabet, quietly shrinking your real keyspace. Neither is used.
Every character class you switch on is guaranteed to appear at least once, so a 12-character password with symbols enabled never turns out to be the 40-character one you asked for minus the symbol. You can drop ambiguous glyphs (I, l, 1, O, 0) for secrets a human has to read back over the phone, and exclude specific characters a broken login form rejects.
Generation happens entirely in your browser tab and nothing is transmitted, so the password is not going through our server on the way to you. For accounts you cannot afford to lose, the last step is still yours: put the result straight into a password manager rather than a text file, and turn on the two-factor option the site offers.
How to use
- 1Open the Password Generator tool page.
- 2Enter or paste your input into the provided fields.
- 3The tool processes your input instantly in your browser.
- 4Copy or download the result using the buttons provided.
Privacy & limitations
- Processing happens locally in your browser — nothing is uploaded.
- Works on modern desktop and mobile browsers.
- Very large inputs may take a moment; the interface will show progress.
Frequently asked questions
Related tools
Security Header Analyzer
Reviews supplied HTTP response headers for common browser security protections.
Content Security Policy Builder
Generates a Content Security Policy from selected directives.
Content Security Policy Reviewer
Identifies common configuration weaknesses in a supplied policy.
Referrer Policy Builder
Generates a Referrer-Policy header based on privacy requirements.
Password Policy Builder
Creates password rules based on configurable organizational requirements.
Password Strength Estimator
Estimates password strength locally and explains common weaknesses.
Password Pattern Auditor
Checks a supplied policy against sample password strings without transmitting them.
Secret Pattern Scanner
Flags likely API keys, tokens, and passwords in supplied text.