How random is the generated password?

Passwords are generated using the browser's built-in crypto.getRandomValues() API, which produces cryptographically secure random numbers. Each character is picked with rejection sampling, so every character in the chosen sets is equally likely.

Is the password sent to a server?

All generation happens entirely in your browser tab. Our servers are not involved at any point.

What length should I choose?

A minimum of 16 characters with uppercase, lowercase, numbers, and symbols gives very strong entropy. For high-security accounts, 20 or more characters is recommended.

Can I generate multiple passwords at once?

Yes. Use the bulk generation section at the bottom to generate up to 100 passwords at once, each independently random.

Random password generator

Generate a cryptographically random password using your browser's built-in crypto API. Set the length and character types, then copy your password. Everything happens locally in your browser.

Very strong · 128 bits

Copying puts the password on your clipboard. Your operating system may keep it in its clipboard history.

Length20

A–Z uppercasea–z lowercase0–9 numbers!@# symbols

Bulk generation

Generatepasswords

How it works

The tool uses crypto.getRandomValues(), the browser's built-in cryptographically secure random number generator, to select characters or words. No library is required and our servers are not involved. The password is generated entirely inside your browser tab.

Processing runs in your browser

All generation runs locally in your browser. The password exists only in your browser until you copy it. You can prove this yourself in your browser's DevTools Network tab. Once you copy a password, your operating system may keep it in its clipboard history or sync it to your other devices: Windows clipboard history and cloud clipboard, Apple Universal Clipboard or a clipboard manager. In a private window, Chrome, Edge and Firefox keep copies out of Windows clipboard history and cloud clipboard.

Related operations

To share a Wi-Fi password without reading it out, use the Wi-Fi QR code generator. When you need random identifiers rather than secrets, use the UUID generator. To check that a copied key or file arrived unchanged, compare SHA-256 checksums with the hash generator.

Frequently asked questions

How random is the generated password?: Passwords are generated using the browser's built-in crypto.getRandomValues() API, which produces cryptographically secure random numbers. Each character is picked with rejection sampling, so every character in the chosen sets is equally likely.
Is the password sent to a server?: All generation happens entirely in your browser tab. Our servers are not involved at any point.
What length should I choose?: A minimum of 16 characters with uppercase, lowercase, numbers, and symbols gives very strong entropy. For high-security accounts, 20 or more characters is recommended.
Can I generate multiple passwords at once?: Yes. Use the bulk generation section at the bottom to generate up to 100 passwords at once, each independently random.

Last reviewed September 30, 2026

Other pages for this tool

Related tools

Background reading: Complete guide to developer tools
Step by step: Generate and hand off a password by QR code