How the password is generated
Each character is drawn independently from the alphabet you enable: 52 letters, plus 10 digits and 23 symbols if you switch them on. Strength is measured in bits of entropy = length × log₂(alphabet size). A 16-character password from the full 85-character set is about 102–105 bits, which no attacker can brute-force. Dropping to 8 characters halves that and is no longer safe.
Pair this with the password entropy calculator when you need the fuller picture.
How to use it
Set the length (12 is a sensible floor, 16 or more is better), then enter 1 or 0 for digits and symbols depending on what the site accepts. Press Generate, copy the result, and store it in a password manager — a random password is only useful if you never have to remember it. Use a different one for every account.
Groups often move straight on to the UUID generator afterwards.
Randomness and security
Unlike the other random tools on this site, this generator uses crypto.getRandomValues(), the browser's cryptographically secure random source, and only falls back to Math.random() on very old browsers that lack it. Generation happens entirely on your device: the password is never transmitted, logged or stored, and it disappears when you close the page. Compare that with the random number generator, which uses ordinary Math.random() and is not suitable for secrets.
The random letter generator is the obvious companion when this one is not quite the right shape.
Frequently asked questions
- How long should my password be?
- At least 12 characters, and 16 or more for important accounts. Length adds strength faster than exotic symbols do.
- Is the password sent over the internet?
- No. It is generated in your browser and never leaves your device.
- Is this random source secure?
- Yes. It uses crypto.getRandomValues(), the browser's cryptographic generator, falling back to Math.random() only on very old browsers.
- What if a site rejects symbols?
- Set the symbols field to 0 and increase the length by a few characters to keep the same overall strength.
- Can I memorise a password like this?
- Realistically no, and you should not try. Random strings are meant for a password manager; if you must remember one, use a passphrase of four or five random words instead.