ToolSink

Password Generator

Generate cryptographically-secure random passwords with a strength meter.

— generate a password —

What is the Password Generator?

The Password Generator creates strong random passwords using the browser's cryptographically secure random source. Choose the length and character sets — uppercase, lowercase, digits, symbols — and optionally exclude ambiguous characters like O and 0.

Random generation avoids predictable choices based on names, dates, keyboard patterns or reused phrases. Length and a sufficiently broad character pool increase the number of possible combinations, while the ambiguous-character option helps when a password must be read or typed manually.

Pair it with a password manager: generate here, save there. The page does not retain a recovery copy, so losing the generated value after setting it on an account can require that account's reset process.

How to use the Password Generator

  1. 1Pick a length (16 characters is a good default; 20+ for master passwords).
  2. 2Toggle character sets: uppercase, lowercase, digits, symbols.
  3. 3Optionally exclude ambiguous characters.
  4. 4Click "Generate" and copy the password into your password manager.

When to use the Password Generator

  • Create a unique credential for a newly registered online account.
  • Replace a reused or exposed password during a security review.
  • Generate a long service credential for a development or staging system.
  • Produce an unambiguous password that must be transcribed once before secure storage.

Key features

  • Adjustable length
  • Configurable character sets
  • Ambiguous-character avoidance option
  • Cryptographically secure randomness (Web Crypto API)

Important notes

  • Passwords are generated locally in your browser using the crypto API and are never transmitted to or stored on any server.
  • For real security, use a long, unique password for every account and store it in a password manager — this tool does not save what it creates.
  • Length matters more than complexity: a longer passphrase is generally harder to crack than a short string of mixed symbols.

Frequently asked questions

Is the password truly random?

It uses the Web Crypto API, the same cryptographically secure source used by password managers.

What length should I choose?

16 characters for online accounts; 20+ with mixed character sets for master passwords.

Why should every account use a different password?

If one service is breached, password reuse lets attackers try the same credential elsewhere. Unique passwords contain the damage to one account.

Where should I store the result?

Save it immediately in a reputable password manager. Do not leave it in chat, email, screenshots or an unencrypted notes file.

Does excluding ambiguous characters weaken it?

It slightly reduces the character pool, but a sufficiently long password remains strong. Increase length if you want to compensate.

Tap any tool to jump straight in — no signup, works on mobile.

View all →