Generate a random password
Passwords stay on this page and are not uploaded or saved. Settings edits or leaving clear the current result.
Help & FAQs
Choose a length and character groups, then generate one password locally.
How to generate a password
- Choose a length from 8 to 128 and at least one character group.
- Select Generate. Every selected group will appear at least once.
- Review the current password and explicitly copy it. Changing settings or clearing removes the result.
Generation rules and limits
The default is 20 characters with all four groups enabled. Each selected group appears at least once. All generation uses ASCII, independently of the page language. Changing any setting cancels pending generation and clears the previous result.
Sampling is uniform over passwords that satisfy the chosen constraints: byte rejection removes modulo bias, then complete-candidate rejection enforces group coverage. One run is bounded to 1,024 candidates, 262,144 random bytes and 45-second checkpoints. These are work limits, not a strength rating or a security certification.
Generate and Copy are separate actions. Copy failures leave a selectable result; late copy callbacks cannot restore an old result or status after settings change, reset or leaving. Cancel, clear, pagehide and unmount invalidate the active task and remove the current result. No password, length, character choices or arbitrary error text enters analytics, URLs or persistent storage.
Common questions
Which characters can appear?
Uppercase A–Z, lowercase a–z, digits 0–9 and the 32 ASCII punctuation characters are separate choices. Spaces and non-ASCII characters are not used. Exclude similar characters removes I, l, 1, O, 0, o and | from any selected groups.
How is the randomness generated?
The tool uses the browser’s crypto.getRandomValues. It discards random bytes outside a complete alphabet range and rejects complete candidates that miss a selected group. It does not fall back to Math.random. If cryptographic randomness is unavailable, generation fails explicitly.
Is the password saved or checked against a service?
The tool keeps only the current result in this page’s memory. It does not save a history, upload passwords or test them against websites. Copying writes to your device clipboard only after your action; clearing the page does not clear your clipboard. Check the destination service’s password requirements yourself.