How long should my password be?

At least 16 characters with a password manager. 12 minimum with a full character pool.

Is crypto.getRandomValues() truly random?

It is cryptographically secure, computationally indistinguishable from true randomness, using OS-level entropy.

Should I memorize generated passwords?

No. Store them in a password manager. Memorize one master password and use generated passwords for everything else.

What if I need a password I can type?

Use the Passphrase Generator for memorable word sequences with high entropy.

Password Generator

Free online secure password generator. Generates cryptographically strong passwords locally using the Web Crypto API. No data sent to any server.

Free online secure password generator. Generates cryptographically strong passwords locally using the Web Crypto API. No data sent to any server. Configure your password options: set length and toggle uppercase, numbers, and symbols. Click "Generate" to create a cryptographically secure random password. Review the generated password and its entropy rating in the details panel. Click "Copy" to copy the password and use it for your accounts. 100% client-side. Uses crypto.getRandomValues() for CSPRNG. Nothing leaves your browser.