Free Password Generator

How this password generator works

Everything happens in your browser. When you generate a password, your device uses the Web Crypto API — crypto.getRandomValues(), a cryptographically secure random source built into modern browsers — to pick characters at random from the sets you choose. The result is shown on your screen and nowhere else: it is never transmitted to our servers, written to a log, or stored. You can disconnect from the internet after the page loads and it still works, which is the simplest proof that nothing is being sent anywhere.

What makes a password strong

Two things matter far more than clever substitutions like “p@ssw0rd”:

• Length. Each extra character multiplies the number of guesses an attacker needs. 16+ characters is a sensible floor; 20+ is better.
• Randomness. A truly random password has no pattern to exploit. Human-chosen passwords almost always do.
• Uniqueness. Use a different password for every account. That way, one site's breach can't unlock your others — the single biggest real-world risk.

How to store passwords you can't memorise

Strong passwords are, by design, hard to remember — that's the point. Rather than reusing one you can recall, use a reputable password manager: it stores each random password securely and fills it in for you, so you only ever memorise one master password. Generate here, save there, and you get strong, unique passwords everywhere without the memory burden.

Pair it with the rest of your privacy kit

A strong password is one layer. When you sign up somewhere, you can also keep your real identity out of it with a temporary email and virtual number, and share anything sensitive with a self-destructing burner link. For the full approach, see our guide on signing up without revealing your identity.

Frequently asked questions