How random are the generated passwords?

Each character is picked using crypto.getRandomValues, the Web Crypto API's cryptographically secure random number generator — not Math.random(), which is predictable and unsuitable for passwords. This gives every character an equal, unbiased chance from the selected character sets.

How long should my password be?

16 characters mixing uppercase, lowercase, numbers and symbols is a solid baseline for most accounts. For higher-security accounts, use 20+ characters — every extra character multiplies the number of guesses an attacker needs.

Password Generator

Generate strong, random passwords with customizable character sets.

How this is calculated

Each character is picked uniformly at random from the selected character sets using crypto.getRandomValues

Assumptions used in this calculation

Client-side only: Passwords are generated entirely in your browser and never sent to a server.

About this calculator

The password generator creates cryptographically random passwords using your browser's Web Crypto API, entirely client-side, with customizable length and character sets.

Worked example

16-character password with all character sets

Result: A cryptographically random password

Was this helpful?

Frequently asked questions

UUID Generator

Generate random version-4 UUIDs for use in code and databases.

Password Generator

About this calculator

Frequently asked questions

How random are the generated passwords?

How long should my password be?

Related calculators