Password Generator
What you get
From the cryptographic source, not an ordinary one
Every character comes from the computer's own cryptographic random number generator, the same source used for encryption keys — not an ordinary random number generator, which is not built for this.
Every character, with perfectly equal odds
Each character's draw is built not to favour the start of the allowed list — an easy mistake in a generator written in a hurry, and invisible if you only look at one generated password.
Length matters more than variety
A longer password beats a shorter one stuffed with symbols — the page says so plainly rather than leaving you to guess which one matters more.
Nothing is kept on the server
The password is not stored, not logged and not sent anywhere else afterwards — it reaches you once.
How it works
- Choose the length and tick the character classes you want.
- Press Generate, if JavaScript is off.
- Get a fresh password, generated right then.
Worth knowing
Why there is no strength score
Any such number is a guess dressed as arithmetic — nobody can say exactly how easy a password is to guess without also knowing how an attacker is trying. What actually matters, length, is said plainly above, instead of hidden inside a made-up number.
How the characters are chosen
Each character is chosen with perfectly equal odds among every one allowed. A draw that would upset that balance — one that would slightly favour the start of the list — is thrown away and redrawn, rather than forced to fit.
Frequently asked questions
Why is there no password strength score?
Because such a score is a guess dressed as arithmetic — nobody can know for certain how hard a password is to guess without also knowing the attacker's method. Length, which actually matters, is said plainly rather than hidden inside a made-up number.
Does length or symbol variety matter more?
Length. A sixteen-character password with no symbols at all is harder to guess than an eight-character one made only of symbols — the opposite of what most advice says.
Does my password reach the server?
Yes — it is generated on the server and reaches you over an encrypted connection. It is not kept and not logged anywhere, but it does cross the network to reach you.
Why not use an ordinary random number generator?
Because an ordinary random number generator is not built to be unpredictable to someone trying to guess it — this password comes from the computer's own cryptographic source, the same one used for encryption keys.