Random Password Generator

Yes. Every password is generated in your browser with crypto.getRandomValues — the Web Crypto API's cryptographically secure random number generator — never Math.random(), whose output can be predicted. Nothing is sent to a server, added to the URL, or saved.

Length matters more than complexity: a longer password from a larger character set has more entropy and is exponentially harder to guess. Aim for at least 16 characters with a mix of character types, or a memorable passphrase of several random words — enough that its entropy is high (this tool defaults to 7 words). Most importantly, use a different password for every account.

Use a random password (stored in a password manager) for accounts you never type by hand — it's the strongest per character. Use a memorable passphrase for the few passwords you must type from memory, like your device login or password-manager master password: several random words are strong and far easier to remember than a random string.

No. Generation happens entirely locally in your browser. Nothing is transmitted to a server, written to the URL, saved to local storage, or logged. Close the tab and the passwords are gone.

For random passwords, keep the Digits and Symbols options on. For passphrases, enable "Add a number" to append two random digits, which satisfies most number requirements without weakening the passphrase.