How this generator works
Passwords are built using your browser's cryptographically secure random number generator, not a predictable pseudo-random function, and the character pool is drawn only from the types you select. Nothing is sent to a server — the password is generated and shown entirely on your device.
What makes a password strong
Length matters more than complexity: a 16-character password with mixed character types is far harder to crack than an 8-character password with symbols. Avoid reusing passwords across sites, and store generated passwords in a password manager rather than memorizing or reusing variations of the same one.
Frequently asked questions
Is this password generator actually secure, or just for testing?
It uses your browser's built-in cryptographically secure random number generator (Web Crypto API), the same class of randomness used in real security software — not a simple predictable random function. It's suitable for real account passwords.
Should I write down or memorize the password I generate?
Neither is ideal for long-term use. The best practice is to save it directly into a reputable password manager, which stores it securely and can autofill it later without you needing to remember it.
Why do some generated passwords exclude characters like 0, O, l, and 1?
This tool deliberately avoids visually similar characters (like uppercase O and zero) in some character sets to reduce transcription errors if you ever need to type the password manually rather than paste it.
Does turning off symbols make a password much weaker?
It does reduce the character pool, which lowers the total number of possible combinations. If a site doesn't allow symbols, compensate by increasing the length instead — length has a bigger impact on strength than symbol variety.