Security Tool
Password Generator
Create strong random passwords with your preferred length and character types.
What this calculator does
The Password Generator creates a random password based on length and character options. Strong passwords are long, unpredictable, and different for every account. The tool can mix lowercase letters, uppercase letters, numbers, and symbols based on site rules.
Generation happens entirely in your browser: the page builds a character pool from the options you tick, then draws random characters until the requested length is reached. Nothing you generate is transmitted or stored by the site, so each result exists only on your screen until you copy it.
When to use it
Use it when creating a new account, updating a weak password, setting up an admin login, creating a Wi-Fi password, or replacing a reused password. Store generated passwords in a trusted password manager.
Use it whenever a new credential is needed: fresh accounts, password rotations after a breach notification, router or Wi-Fi admin passwords, or one-off shared logins. The generated string should go straight into a password manager — the point of random passwords is that they are unmemorable, and reusing one across sites cancels the benefit.
Formula used
The method is random selection from an allowed character set. When browser crypto is available, stronger random values are used to pick each character.
Strength grows exponentially with length and pool size: each extra character multiplies the search space by the pool size. A 12-character password over a 70-character pool has roughly 70¹² possibilities — length beats cleverness, which is why adding 4 characters helps far more than any substitution trick.
Understanding each option
- Length — the number of characters. Twelve is a reasonable floor today; sixteen or more is better for anything important, and long passwords cost you nothing when a manager fills them.
- Uppercase — adds A–Z to the pool, and satisfies the “mixed case” rule many sites enforce.
- Numbers — adds 0–9.
- Symbols — adds punctuation characters. Enable it unless a specific site rejects symbols; a few legacy systems do.
Example calculation
If length is 16 and all options are enabled, the tool builds a set of letters, digits, and symbols, then randomly selects 16 characters from that set.
With all options on, every character drawn is one of roughly 70 possibilities, so a 16-character result is astronomically beyond brute force. The practical implication of the example is different: since each click gives a fresh independent password, generate a new one per account rather than reusing one strong string.
Benefits
- Create unique passwords
- Match account rules
- Avoid weak patterns
- Generate quickly
- Support password-manager workflows
Compared with inventing passwords, generation removes the human patterns attackers exploit first — names, dates, keyboard walks, and the word-plus-year format. It also makes rotation painless: replacing a credential is one click and one paste, not a creative exercise.
Using the result safely
Copy the password directly into the destination and a password manager in one sitting — regenerating later produces a different string, so an uncopied password is gone. If a site rejects it, adjust the options rather than hand-editing the result, so the replacement is still uniformly random. Pair important accounts with two-factor authentication; a strong password protects against guessing, not phishing.
Assumptions and limitations
The generator uses the browser's randomness and standard character pools. It does not check a site's specific composition rules (some ban certain symbols or cap length), does not screen against breached-password lists, and cannot protect a password that is later phished or reused. Strength estimates assume the attacker must brute-force, which is only true when the password is unique.
Common mistakes
- Generating a strong password and then storing it in a plain text file or chat message.
- Trimming a long password down to something memorable, which removes most of its entropy.
- Reusing one generated password across several sites because it “looks strong”.
- Skipping symbols out of habit when the site actually allows them.
FAQs
Should I reuse passwords?
No. Use a different password for every important account.
Where should I store passwords?
Use a reputable password manager.
Are longer passwords better?
Generally yes. Length makes random passwords harder to guess.
Do all sites allow symbols?
No. Adjust options to match site rules.
Can this guarantee security?
No. Strong passwords help, but two-factor authentication and safe habits also matter.
AdSense review note
The password generator is a browser utility for creating stronger random strings. Password strength also depends on storage, reuse, phishing resistance, account recovery, and whether a reputable password manager or two-factor authentication is used. See the editorial standards and site disclaimer for the review process and safety limits.
Related calculators
Continue with tools commonly used with the Password Generator.