Create strong, random passwords that never leave your device.
— This generator builds each password from cryptographically secure randomness using your browser's built-in crypto.getRandomValues, the same source recommended for security-sensitive values. Nothing is sent over the network, logged, or stored: the password exists only in your browser tab until you copy it. Reload the page and it is gone. That makes it safe to generate credentials here without trusting a server with them.
The single biggest factor in password strength is length. Each extra character multiplies the number of possible combinations, so a longer password is dramatically harder to guess than a short but complicated one. Turning on more character types — lowercase, uppercase, digits and symbols — increases the size of the pool each character is drawn from, adding further strength. The tool shows an approximate entropy figure in bits so you can see the effect: aim for at least 80 bits for important accounts, and higher where a service allows it.
A strong random password is only useful if you don't have to remember it, so store it in a password manager rather than reusing it or writing it down insecurely. Use a different password for every account, so that a breach on one site can't unlock the others. If a service rejects certain symbols, turn that character type off and increase the length to compensate.
Yes. They come from your browser's cryptographic random number generator, not a predictable pseudo-random function.
No. Generation happens entirely on your device and nothing is transmitted. Closing the tab discards the password.
For most accounts, 16 characters or more is a good baseline. For high-value accounts, go longer and enable all character types.