Strong Password Generator
Creates a password in the browser with crypto.getRandomValues. Choose a length and character set (uppercase, lowercase, digits, and symbols). Generation runs on this device. This is not a password manager and is not affiliated with password-manager products.
Strong password generator
Character set
Symbols: !@#$%^&*()-_=+[]{};:,.? — at least one set must be on.Generated on this device with crypto.getRandomValues. Not sent, not stored, not logged. This is not a password manager and is not affiliated with LastPass, NordPass, Bitwarden, 1Password, or other password-manager products.
How to use
- Set a length from 1 to 10000 (default 16).
- Toggle uppercase (ABC…), lowercase (abc…), digits (0123456789), and symbols.
- Click Generate password. Copy stays on this device. Nothing is sent or stored.
Results
Generating on this device…
Runs in your browser. Nothing is uploaded.
Frequently asked questions
How does this strong password generator use CSPRNG?
This page calls crypto.getRandomValues in your browser (a cryptographically secure pseudorandom number generator). Each character is chosen with a uniform index into the selected charset. Rejection sampling avoids modulo bias. The page never uses Math.random.
How do length and character set work?
Choose an integer length from 1 to 10000 (default 16). Toggle uppercase A–Z, lowercase a–z, digits 0–9, and a small symbol set (!@#$%^&*()-_=+[]{};:,.?). At least one character set must be on. Every generated character comes from the sets you selected.
Is the password sent to a server or stored?
No. Generation runs on this device. The password and your options are not sent to a server, not stored, and not written to localStorage or sessionStorage. Refreshing the page clears the form. Copy uses the browser clipboard on this device only.
Is this a password manager?
No. This is a strong password generator only. It does not save logins, sync vaults, autofill, or call password-manager APIs. It is not affiliated with LastPass, NordPass, Bitwarden, 1Password, or other password-manager products.
How is this different from the hash generator or MD5?
A hash generator turns text into a digest (SHA-256, SHA-1, SHA-512, or MD5). This tool creates a new random password with CSPRNG. Hashing is one-way and is not a way to make a password. This page does not hash passwords and is not for password storage.
Is there a maximum length?
Yes. Length must be an integer from 1 to 10000. 10000 is allowed. 10001 and larger are rejected. Empty, zero, negative, non-integer, and non-finite lengths fail closed with an error. Nothing is sent to a server either way.
Do I need an account? Does this run on the server?
No. The strong password generator is client-side only. There is no signup. Passwords are generated in your browser with crypto.getRandomValues. Nothing is sent to a server.