Password Generator

How this works

Each character is drawn from your selected pool using crypto.getRandomValues, the browser's cryptographically secure random source, with rejection sampling so every character is equally likely. There is no server involved — view the page source and you can confirm nothing is sent.

What makes a password strong

Strength comes from entropy: how many equally likely possibilities an attacker must search. That grows with both the size of the character pool and the length. Adding four random lowercase letters multiplies the search space by roughly 457,000; adding a single symbol to a fixed-length password helps far less. When in doubt, make it longer.