Password Generator
Generate a random password locally with uppercase and lowercase letters, numbers, and symbols.
The generator includes at least one uppercase letter, lowercase letter, number, and symbol. Very short passwords are available for testing but may not be suitable for real accounts.
Generated Password
Generated password will appear here.
Privacy and Handling Note
Generation happens locally with crypto.getRandomValues. This tool does not send the generated password to a server. The password can still be exposed through your screen, clipboard history, browser extensions, or the device itself, so store and share it carefully.
Creating a Unique Random Password
Reusing one password across services allows a breach at one service to affect other accounts. A randomly generated password can help you use a different credential for each account, system, or test environment.
This generator uses the browser cryptography API, selects characters without modulo bias, includes all four character groups, and shuffles the final result. A website may still reject some symbols or impose a different maximum length.
How to Generate a Password
- Choose a length from 4 to 64 characters.
- Generate a new random value.
- Check that the destination accepts the included symbols and length.
- Copy the password and save it in a trusted password manager or approved secret store.
- Generate another value instead of reusing the same password elsewhere.
Where Random Passwords Are Useful
- Creating a unique login credential for an online account.
- Generating temporary values for local development or testing.
- Replacing a reused password during an account-security review.
- Creating database, dashboard, or service credentials when passwords are supported.
Important Limits
- A generated password is not safe if it is stored or shared insecurely.
- Some systems use passkeys, API keys, tokens, or key pairs instead of passwords.
- Account protection also depends on phishing resistance, recovery controls, and multi-factor authentication.
- A four-character password may be useful for testing but should not be described as strong.
Frequently Asked Questions
How does the generator choose characters?
It uses crypto.getRandomValues and rejection sampling so every character in the selected set has an equal chance of being chosen.
Does every generated password contain each character group?
Yes. For lengths of four or more, the result includes at least one uppercase letter, lowercase letter, number, and symbol.
Is the generated password uploaded?
No. Generation happens in your browser. Copying or storing the password may still expose it through the clipboard, device, browser extensions, or another application.
What length should I choose?
Use the longest unique password the destination accepts and that your password manager can store reliably. Required length and character rules vary by system.