What This Tool Does
This password generator creates random, secure passwords using your browser's cryptographic random number generator. You choose the length and character classes (uppercase, lowercase, numbers, symbols), and it produces a password that meets common security policies for accounts, Wi-Fi, encryption keys, and more.
Inputs Explained
- Length: Total number of characters in the password. Recommended: 16+ for accounts, 24+ for high-security.
- Include Uppercase: Adds A–Z characters to the pool.
- Include Lowercase: Adds a–z characters to the pool.
- Include Numbers: Adds 0–9 characters to the pool.
- Include Symbols: Adds special characters such as !@#$%^&*.
- Exclude Ambiguous: Skips lookalike characters like 0/O, 1/l/I to reduce typing errors.
How It Works
The generator uses window.crypto.getRandomValues() — a cryptographically secure random number generator built into modern browsers — to pick characters from your selected pool. Each character is chosen independently with a uniform distribution, which guarantees high entropy (randomness strength).
Formula / Logic Used
Password Generator
Create strong, cryptographically random passwords. Nothing is ever sent to a server.
Step-by-Step Example
Length: 16
Sets: Upper + Lower + Numbers + Symbols (94 character pool)
Sample output: k!8nQ#2vR$mP9wX@
Entropy: ≈ 105 bits — would take billions of years to brute-force.
Use Cases
- New account creation: Generate a unique strong password for every site instead of reusing one.
- Wi-Fi network setup: Create a 24+ character WPA2/WPA3 passphrase that resists dictionary attacks.
- API keys and tokens: Quickly generate long random strings for development and testing.
- Password rotation: Replace old or breached passwords with fresh, high-entropy ones.
- Encryption keys: Produce strong keys for password-protected ZIP files, PDFs, or disk encryption.
Assumptions and Limitations
- The strength estimate assumes the attacker knows your character set and length, which is the worst case.
- Generated passwords are not stored. Once you close the page, they are gone — copy them to a password manager.
- Symbols allowed are a common safe set. Some legacy systems reject specific symbols; verify with the target site.
- Cryptographic randomness depends on your browser. All modern browsers (2015+) implement crypto.getRandomValues correctly.
Random Password Generator Online
Use a random password generator online to create unique passwords for each account. Longer passwords with mixed character types are harder to guess, and a password manager makes them practical to store.
Frequently Asked Questions
How to generate a strong password online
Set the length to at least 16 characters, switch on uppercase, lowercase, numbers, and symbols, then click Generate. The tool produces a random string like "K7$mP@xR2nQ!vL9w" that's nearly impossible to guess or brute-force. Copy it straight into your password manager — don't try to memorise it, that's not the point. Strong passwords are about randomness and length, not cleverness. The longer and more varied the character set, the harder it is for an attacker to crack.
What is a good password length in characters
Aim for 16 characters or more for general accounts and 20-plus for anything sensitive like banking or email. Length matters more than character variety because every extra character roughly doubles the time needed to brute-force the password. A 16-character random password mixing letters, numbers, and symbols would take a determined attacker effectively forever with current hardware. Use a password manager so length doesn't become a memorisation problem you have to solve every login.
How many characters should a secure password be
12 characters is the bare minimum these days, 16 is the comfortable target, and 20-plus is what you want for accounts protecting money, identity, or work data. Hardware keeps getting faster, so old advice about 8-character passwords no longer holds up. The catch — long passwords are hard to remember, so use a password manager. Generate it once, save it, and let your manager autofill. You don't need to know it; you just need to use it.
How to create a random password with symbols
Switch on the Symbols toggle along with letters and numbers. The generator includes characters like !, @, #, $, %, &, *, ?, and so on. Set your length, click Generate, and you get something like "T9@kP$mR!nQx7vL". Some sites still don't accept certain symbols (looking at you, banks that disallow ampersands), so if your password keeps getting rejected during sign-up, regenerate without the problematic symbol or check the site's password rules first.
How to make a secure password without ambiguous characters
Turn on the "exclude ambiguous characters" toggle. That removes confusing pairs like the letter O and the number 0, capital I and lowercase l and the number 1, capital B and the number 8. The generator then picks only from clearly distinguishable characters. Useful when you'll have to type the password somewhere — handing a Wi-Fi password to a guest, reading it off a printed sheet, or dictating over a phone call. For copy-paste use, ambiguity doesn't matter.
How to generate a password for wifi
Set the length to 20 characters or more and turn on letters, numbers, and symbols. A long random Wi-Fi password is hard to brute-force and rarely needs to be typed — once a device is paired, the password stays cached. If you regularly hand the password to guests, switch on "exclude ambiguous characters" so reading "I, l, 1" or "O, 0" out loud doesn't cause confusion. Save it in your password manager and share through a QR code if your router supports one.
How to check password entropy online
The generator shows an entropy estimate next to your generated password, in bits. Higher is better. A 16-character password using letters, numbers, and symbols comes out around 100 bits of entropy — strong enough to resist brute-force attempts for a very long time. Below 60 bits is considered weak, 80 to 100 is good, above 100 is excellent. The number depends on length and the size of the character set you've enabled — more types means more entropy.
Sources and References
- NIST SP 800-63B Digital Identity Guidelines — Official US guidelines on password strength and policy.
- MDN — Crypto.getRandomValues() — Cryptographic RNG used by this tool.
- OWASP Authentication Cheat Sheet — Industry-standard guidance on password handling.
- Wikipedia — Password Strength — Background on entropy and brute-force resistance.
Related Calculators
What this tool does
Password Generator turns the visible inputs on the page into a specific result and keeps the calculation context close to the form. The added notes identify what the output means, which assumptions matter, and when the result should be checked against source data or official guidance.
How to use this tool
- Enter the values requested by the form, keeping units, formats, and date fields consistent.
- Run the calculation or conversion and review each output label before using the result elsewhere.
- Compare important results with the page notes, examples, or official references when accuracy affects money, safety, configuration, or reporting.