Password Generator
Generate strong, random passwords with customizable options
Bulk Generate
Generate strong, random passwords without trusting a server
Strong passwords are long, random, and unique to each account — but generating them in the browser, with the actual randomness coming from the Web Crypto API, is what makes them safe to use. A password generator with character-set toggles produces values that satisfy any password policy without ever leaving your machine.
Use the generator when you need to
Set a strong password for a new account
Generate a long, random value that satisfies the site's policy and store it in your password manager.
Rotate credentials safely
Produce fresh credentials when rotating database passwords, API tokens, or admin accounts.
Generate temporary passwords for handoff
Create short-lived credentials when handing access to a contractor or resetting a teammate's account.
How to generate a password
- 1
Choose the length and which character sets to include (uppercase, lowercase, numbers, symbols).
- 2
Click Generate to produce a value using the browser's secure random source.
- 3
Copy the password into your password manager or directly into the form.
Keep going
Generate UUIDs
Pick UUIDs when you need a unique identifier rather than a credential.
Hash text or files
Hash sensitive values when storing them, instead of keeping them in plaintext.
Encode credentials
Encode credentials as Base64 for use in Basic auth headers.
Escape JSON strings
Safely embed generated values inside JSON config files.
Common password workflows
Generate a 24-character password and store it in 1Password, Bitwarden, or your team manager.
Produce a new value, deploy it, and retire the old one without ever typing the value yourself.
Generate a short value with mixed character sets that satisfies a one-time login screen.
Related Tools
Frequently Asked Questions
The tool uses the Web Crypto API's getRandomValues, which provides cryptographically secure randomness. The output is suitable for passwords, API tokens, and other security-sensitive values.
No. Generation happens entirely in your browser using crypto.getRandomValues. The password never leaves your machine — verify in your browser's Network tab.
For most accounts, 16–24 characters with mixed character sets is strong. For high-value accounts (root credentials, encryption passphrases), use 32+ characters. Always store generated passwords in a password manager rather than memorizing them.
Yes. Toggle the option to exclude characters like 0/O, 1/l/I that are easy to confuse — useful when the password might be typed manually or read aloud during handoff.
Never. Generate a unique password per account and store them in a password manager (1Password, Bitwarden, etc.). If one site is breached, password reuse means every other account using the same value is also compromised.