Password Generator
Create passwords with configurable rules and strength cues.
Runs locally in your browser.
Review important security-sensitive data and configurations independently.
🔒 Generated locally in your browser.
Strength: Very weak
Use in code
Use cryptographically secure randomness APIs to build password strings from allowed character sets.
Generate secure random password
TypeScriptPrimary API
crypto.getRandomValues()
Builds a password by sampling random indices from an allowed character set.
const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*";
const length = 20;
const bytes = new Uint32Array(length);
crypto.getRandomValues(bytes);
const password = Array.from(bytes, (value) => chars[value % chars.length]).join("");
console.log(password);Reference: Web Crypto API documentation
How to use
- Choose length and character options.
- Generate one or multiple password candidates.
- Copy a password and store it in a trusted password manager.
Use cases
- Create strong credentials for new accounts.
- Rotate passwords for existing services.
- Generate unique passwords per environment or project.
Examples
- Longer passwords are generally harder to brute-force.
- Mixing uppercase, lowercase, numbers, and symbols increases entropy.
- Use unique passwords instead of reusing one across accounts.
Limitations and caveats
- Generated passwords should be saved immediately in a secure manager.
- Password strength indicators are guidance and not a full security audit.
History
- Password generation tools became more common as online account usage expanded and password reuse risks increased.
- Security guidance shifted from simple memorable passwords to longer, higher-entropy credentials.
- Built-in browser and manager generators helped normalize unique password usage across services.
Source: NIST SP 800-63B Digital Identity Guidelines · OWASP Authentication Cheat Sheet
Evolution and improvements
- Early generators focused on random strings only; newer tools allow balanced character rules and length control.
- Modern security recommendations prioritize length and uniqueness over frequent forced resets.
- Current best practice combines strong generated passwords with password managers and multi-factor authentication.
Source: NIST SP 800-63B Digital Identity Guidelines · OWASP Authentication Cheat Sheet
FAQ
Why does password length matter so much?
Length expands the search space significantly and is one of the strongest factors for password strength.
Why does cryptographic randomness matter?
Stronger random generation reduces predictable patterns that attackers can exploit.
Are generated passwords uploaded or logged?
No. Passwords are generated locally in your browser session.