Generate secure, random passwords with customizable options.
Click Generate...Powered by Ubikon Technologies | Generated using the Web Crypto API. No data leaves your browser.
This generator uses the browser's Web Crypto API (crypto.getRandomValues) to produce cryptographically random passwords — the same source used for keys and tokens, not a pseudo-random Math.random() sequence. You choose a length from 8 to 128 characters and which character sets to draw from (uppercase, lowercase, numbers, symbols); each character of the output is picked independently from the combined set.
Settings
Length: 16 Uppercase: on Lowercase: on Numbers: on Symbols: on
Possible output
Kx$9mP!zR2@nWv7q Strength: Very Strong
Every generation is random — your output will be different each time.
How are the passwords actually generated?
With the Web Crypto API's crypto.getRandomValues(), not Math.random(). It fills a typed array of cryptographically random 32-bit values the length you chose (8–128 characters), then maps each value onto your selected character set (uppercase, lowercase, numbers, symbols) by remainder. At least one character type must be enabled or the tool will not generate a password.
How is the strength meter calculated?
From the generated password itself, not a guess: it scores points for length thresholds (12, 20, and 32 characters), for mixing uppercase and lowercase, for including digits, for including symbols, and for character variety (unique characters making up at least 70% of the string). The total score maps to Weak, Medium, Strong, or Very Strong.
Are my generated passwords sent anywhere?
No. Generation, scoring, and the "Recent Passwords" history (last 5, kept only in page state) all happen in your browser. Nothing is transmitted to a server, and the history disappears on refresh unless you copy a password out.
What is the maximum password length?
The length slider runs from 8 to 128 characters. For most logins 16–20 characters with all four character types enabled is a reasonable default; use the higher end of the range for master passwords or anything protecting high-value accounts.