Generate cryptographically secure passwords with custom rules. Uses crypto.getRandomValues โ nothing leaves your browser.
Every character is drawn from crypto.getRandomValues, the browser's cryptographically secure RNG. It's the same source used for encryption keys and session tokens, so the output is safe for security-sensitive use โ there's no predictable seed and no Math.random.
For everyday accounts, 16โ20 characters with all four character sets is plenty โ the strength meter hits Very Strong around 80 bits of entropy. For long-term secrets like password-manager master keys or root account passwords, go to 24 or more.
No. Generation, copy, and download all happen locally in your browser. No password is logged, recorded by analytics, or transmitted โ the tool works fully offline after the page loads.