Random Password Generator — Create Passwords Locally
Generate random passwords in your browser. Steps: set length (8–128), tick uppercase/lowercase/digits/symbols, optional exclude ambiguous chars, click Generate, copy. Example: 16 chars mixing cases, digits, and symbols. Uses crypto.getRandomValues only — not stored or uploaded.
How it works
Slide length, pick character classes, optionally exclude ambiguous glyphs, set count, then Generate. Each character is picked with crypto.getRandomValues from the combined pool. Copy the list — nothing is persisted after you leave the page.
Rules you should expect
Charset rules, randomness source, and honest limits — read before using output on a real account.
- Pools: A–Z, a–z, 0–9, and a default symbol set. At least one pool must remain after toggles and ambiguous exclusion.
- Random index uses crypto.getRandomValues bytes — never Math.random.
- This is not NIST-certified composition enforcement (no forced “one of each class” rule). Enable the sets you need manually.
- Privacy: local-only generation; clear the output when done on shared machines.
Example
Length 16 with all sets enabled might look like `Xk9#mP2$vL4@nQ8!` — mixed case, digits, and symbols. Each click produces a new random string; Load sample uses length 16 and all sets.
Good fits
- Spin up a one-time credential for a staging login you will rotate soon.
- Prototype signup forms that need sample strong passwords in QA scripts.
- Compare how length and symbol sets change readability before updating team policy.
Frequently asked questions
Are passwords stored or sent to a server?
No. Generation runs entirely in your browser. We do not log, store, or transmit passwords you create here.
How strong are these passwords?
Randomness comes from crypto.getRandomValues (CSPRNG), not Math.random. Longer passwords with more character classes generally resist guessing, but no browser tab can promise “unbreakable” — follow your org’s policy and use a manager for production secrets.
Can this tool crack my existing password?
No. This page only creates new random strings. It cannot audit, crack, or recover existing passwords.
What does “exclude ambiguous” do?
They remove visually similar characters (0/O, 1/l/I) so passwords are easier to read aloud or type — at the cost of a slightly smaller charset.
How many passwords can I generate at once?
Up to 100 passwords per click, one per line in the output. Generate again for another batch.
Related tools
Questions or feedback
Something unclear, broken, or missing? Draft a message below — we read every note about these tools.