1
Start with the use case
Use a 16-character random password for ordinary accounts, 20 to 32 for privileged systems, or 4 to 6 random words when you must type it manually.
GENERATE.02 PASSWORD GENERATOR
Secure Password Generator
Random passwords, readable passphrases, and PINs share one compact workspace. Presets solve common cases first; advanced rules appear only for the selected mode.
Generation rules
Type
Quick presets
Uses crypto.getRandomValues; results are not uploaded or written to browser storage
Generated results
— 0 bits · 0 Pool size
Strength is an estimate from length and random space, not a guarantee of absolute security Set the rules and generate a password
Set the rules and generate a password
§ 01
How to generate a password for the situation
2
Confirm the rules
Keep enough length and multiple character classes. If a site restricts symbols, adding length is safer than applying a predictable suffix.
3
Copy and store securely
Put the result in a trusted password manager immediately and use a different password for every account. This page does not save it for you.
§ 02
True randomness matters more than looking complicated
A string such as Password2026 contains letters and numbers but follows an obvious pattern. A secure password should be sampled uniformly from a large space with a cryptographic random source, not built from dates, names, or fixed suffixes.
This tool uses browser-native secure randomness and rejection sampling to avoid character-pool mapping bias. The strength meter describes length and search space without claiming that any password is absolutely unbreakable.
§ 03
Choose a length by use case
Use case
Recommendation
Notes
Ordinary website
16 to 20 characters
Random and stored in a password manager
Admin / server
20 to 32 characters
Generate a distinct value for every system
WiFi / manual entry
16 to 24 characters
Ambiguous characters may be excluded
Passphrase
4 to 6 words
Words must be selected independently at random
Temporary PIN
6 to 8 digits
Only for short-lived, lower-risk verification
§ 04
Frequently Asked Questions
Q1Does this generator upload or save passwords?
No. Random generation, strength estimation, batches, and copying all happen in the current browser page. Results are not sent to a server or written to browser storage.
Q2How long should an ordinary account password be?
At least 16 characters is a practical default. Use 20 to 32 for administrators, servers, databases, or other high-value accounts, and store them in a password manager.
Q3Do more symbols always make a password safer?
Not necessarily. Security comes from an unpredictable random space, and length is often more important than a fixed symbol pattern. If a site rejects symbols, use mixed letters and digits with extra length.
Q4Are passphrases secure?
Four to six words selected independently at random can provide strong security and are easier to type. A familiar quote, song lyric, or personal sentence is not a random passphrase.
Q5Does excluding ambiguous characters reduce security a lot?
It slightly reduces the pool, but the effect is usually small for passwords of 16 characters or more. It can substantially reduce errors when reading or typing the password.