Password Generator

Generate a strong, random password — nothing sent anywhere, generated entirely in your browser

Generating a strong, random password — entirely in the browser, with nothing transmitted anywhere — combines two genuinely separate requirements: sufficient randomness (unpredictability) and sufficient length/character variety (search-space size), and a password can fail on either dimension even while superficially looking "strong."

Why both randomness and length/complexity matter, and neither alone is sufficient

A password's resistance to guessing depends on how large the space of possible passwords an attacker would need to search is — which is determined by both password length and how many different character types (lowercase, uppercase, numbers, symbols) are actually used, since each additional character position and each additional available character type multiplies the total search space. But length and complexity alone aren't sufficient if the password generation process itself isn't genuinely random — a "random-looking" password generated by a weak or predictable process can still be guessable if an attacker can predict or narrow down the generation method, even though the password looks complex on its face. Genuine randomness (the same property discussed for dice rolling) combined with adequate length and character variety together determine actual password strength — neither factor alone is sufficient.

A worked example

A short password using all four character types (lowercase, uppercase, numbers, symbols) can still be weaker against brute-force guessing than a considerably longer password using fewer character types, since search space grows exponentially with length in a way that adding character types alone doesn't fully compensate for — length is generally the more powerful lever for password strength, though both matter.

How this connects to your other technical tools

This tool runs entirely client-side, with nothing generated, transmitted, or stored on a server — the same browser-only privacy property discussed for the Invoice Generator, applied here to something even more sensitive than invoice data, since a generated password is meant to remain secret from the moment it's created.

Common mistakes

Choosing a shorter password with high character-type variety over a longer password with less variety, based on an intuition that "complexity" matters more than length, generally produces a weaker password than the length-prioritized alternative — length is typically the dominant factor in actual password strength, and a sufficiently long password remains strong even with a more limited character set.