Password Generator (2026) - Secure Random Passwords

Length and charset beat memorable phrases

Sixteen random characters from four pools beat an eight-letter dictionary word with a digit suffix. Slider runs 8 to 64. Toggle pools to match site rules (some banks disallow symbols).

Click Generate for a new string. Copy writes to clipboard with a two-second confirmation label.

At least one charset must stay on or the tool refuses to run.

After generate: store and encode safely

Paste into a password manager, not a Slack thread. For API keys you must transmit once, pair with the Base64 Encoder / Decoder only if the receiving system expects encoding, not for security.

QR codes for Wi-Fi join strings can be built in the QR Code Generator after you compose the password offline.

Inspect JWT secrets length requirements with the JWT Decoder on a test token, not on production secrets in chat.

Regenerate on policy change, not on every login

One password per site. Regenerate when a vendor reports a breach or when your policy adds symbol requirements.

Uncheck ambiguous characters (0/O, 1/l) manually by regenerating until the string looks clean if a legacy app rejects them.

This page does not check Have I Been Pwned. Your manager should.

Frequently Asked Questions (FAQ)

How random are the passwords?

Each character is picked with crypto.getRandomValues from the selected charset. Length 8 to 64 via slider. Default 16 with all four charsets enabled.

What if no charset is checked?

Generate is blocked with an alert: select at least one of uppercase, lowercase, numbers, or symbols. Copy stays disabled until a valid password exists.

Are these passwords stored or logged?

No. Generation is client-side only. Copy goes to your clipboard. Close the tab and the string is gone unless you saved it in a password manager.

Which symbols are included?

Default symbol set: ! @ # $ % ^ & * ( ) - _ = + [ ] { }. Uncheck symbols for systems that reject punctuation.

Password Generator