Password Generator

Cryptographically secure

Passwords are sampled from your chosen character pools using window.crypto.getRandomValues with rejection sampling for a truly uniform distribution — the same primitive browsers use for cryptographic keys. Nothing is transmitted; the entire process happens in your device.

Choosing a good length

For a mixed-case + digits + symbols password, 16 characters gives ~104 bits of entropy — far beyond current brute-force capability. Use 20+ characters for master passwords or long-term secrets; 8-12 is fine only for throwaway accounts.