Random Password Generator

How This Password Generator Works

Passwords are generated directly in your browser using the Web Crypto API's crypto.getRandomValues() function. This provides cryptographically secure random values instead of the predictable Math.random() function.

The generator uses rejection sampling when selecting characters. This avoids introducing modulo bias and helps ensure that characters are selected uniformly from the available character set.

What Makes a Strong Password?

The most important properties of a strong password are length, randomness, and uniqueness. A long password generated from a secure random source is generally much harder to guess than a shorter password based on predictable words, patterns, or personal information.

• Use a long password whenever the service allows it.
• Use a different password for every important account.
• Avoid names, dates, dictionary words, and predictable patterns.
• Store unique passwords in a reputable password manager.
• Never reuse an important password across multiple services.

Password Entropy

For a uniformly generated password, the theoretical entropy can be estimated as:

For example, a 24-character password selected uniformly from a character set containing 87 possible characters has approximately 154 bits of theoretical entropy.

This is a theoretical estimate of the generator's output space. Real-world password security also depends on how a password is stored, transmitted, and protected by the service where it is used.

How Long Should a Password Be?

Longer is generally better when the password is randomly generated. The appropriate length also depends on the service's password requirements and whether the password is generated or memorized.

Password vs. Passphrase

A randomly generated password is useful when a password manager will store it for you. A passphrase made from randomly selected words can be easier to remember when you need to type a credential manually.

For important accounts, a reputable password manager can generate and store unique credentials so you don't need to memorize every password.

Is This Password Generator Safe to Use?

The generator is designed so that password creation happens in your browser rather than on our server. It uses the browser's cryptographically secure Web Crypto API rather than Math.random().

As with any website-based tool, you should still keep your browser, operating system, and password manager up to date. For extremely sensitive environments with specific security requirements, use a password-generation mechanism approved by your organization's security team.