WHOISRandom Password Generator
Generate strong, unique passwords instantly — created in your browser, never sent anywhere.
What is a random password generator?
A random password generator creates passwords that are hard to guess because they follow no pattern. People tend to choose words, names, dates and predictable substitutions, which attackers try first. This password generator picks every character at random, so each password is unique and has no link to you.
The password is created entirely in your browser. It is never sent to our server, stored or logged.
How the password generator works
The generator builds a pool of characters from the types you select: uppercase letters, lowercase letters, numbers and symbols. It then asks your browser's built-in cryptographic random number generator, part of the Web Crypto API, for random values and uses them to pick each character from the pool. This is the same kind of randomness browsers use for secure connections, not the predictable randomness used in games.
Look-alike characters left out
To make passwords easier to read and type, characters that are easily confused are excluded: capital I and O, lowercase l, and the digits 0 and 1. The symbol set is !@#$%^&*()-_=+[]{}?.
How to use the password generator
- A 16-character password is created as soon as the page loads.
- Move the slider to choose a length between 6 and 64 characters; a new password appears as you move it.
- Tick or untick the character types to match the site's rules.
- Press Copy, then paste the password into the site or your password manager.
Choosing the right length and characters
Length adds strength faster than anything else. Each extra character multiplies the number of possible passwords by the size of the pool. With all four types selected, the pool has 76 characters, so a 16-character password has more combinations than could be tried with any realistic computing power.
- 12 characters: a reasonable minimum for everyday accounts.
- 16 to 20 characters: a strong default for email, banking and work accounts.
- 32 characters or more: for passwords only a password manager will ever type, such as Wi-Fi keys or service accounts.
If a site rejects symbols, untick them and add a few characters of length instead.
Why randomness matters
Attackers rarely guess passwords by hand. They use software that tries billions of combinations, starting with leaked passwords, dictionary words and common patterns such as a capital first letter and a year at the end. A password chosen by a person usually falls into one of those patterns. A randomly generated password does not, so the only way to find it is to try every combination, which takes far too long for a long password.
Good password habits
Use a different password for every account, so one leak cannot unlock the others. Store them in a password manager rather than a document or browser note, and turn on two-factor authentication wherever it is offered. Change a password straight away if a service tells you it was part of a breach.
Common uses
- Creating a password for a new online account.
- Replacing a reused or weak password.
- Generating Wi-Fi keys and admin passwords for new devices.
Common problems and fixes
The site says the password is invalid. Some sites limit length or allowed symbols. Shorten it or untick Symbols, then generate again.
You need to type the password on a TV or games console. Choose a longer password with only letters and numbers. It stays strong and is much easier to enter with an on-screen keyboard.
The site requires a symbol or number. Characters are picked at random, so a short password can occasionally miss one type. Press Generate New Password until it includes everything required.
Related tools
- Password Strength Checker rates a password you already use.
- Website Security Checker reviews a site's HTTPS and security headers.
- SSL Checker confirms a login page uses a valid certificate.
Frequently asked questions
Is this password generator safe to use?
Yes. Passwords are created in your browser with the Web Crypto API, which provides cryptographically secure random values. Nothing is sent to our server, stored or logged. You can even disconnect from the internet after the page loads and the generator will keep working.
How long should my password be?
At least 12 characters for everyday accounts and 16 or more for important ones such as email, banking and work. Longer is always stronger. If you use a password manager, which types the password for you, there is little reason not to choose 20 or more characters.
Why are some letters and numbers missing from the passwords?
Look-alike characters are excluded on purpose: capital I and O, lowercase l, and the digits 0 and 1. They are easy to confuse when reading or typing a password by hand. Removing them makes passwords easier to use while keeping them very strong.
Does every password include each character type I selected?
Not always. Each character is picked at random from all the selected types, so a short password can occasionally miss one. If a site requires a number or symbol and the password has none, press Generate New Password until it does, or choose a longer length.
Should I use a different password for every site?
Yes. When one site is breached, attackers try the same email and password on many other sites. Unique passwords stop one leak from opening your other accounts. A password manager makes this practical, because it remembers every password for you.
Is a random password better than a passphrase?
Both can be strong. A random password packs more strength into fewer characters, which suits passwords stored in a manager. A passphrase of several random words is easier to remember and type, which suits a master password. The key is real randomness, not a familiar phrase.
Can I save the generated password here?
No. The tool does not store passwords, and the password disappears when you leave or reload the page. Copy it straight into the site you are signing up for and into your password manager, so you never have to remember or write it down.