Generate a random password
Choose a length from 8 to 128 characters and select the character types to include. Every selected type appears at least once in the result.
The password is generated on this page and is not sent or saved. Copying it places it on your system clipboard; clearing the displayed result does not clear the clipboard.
The password is generated on this page and is not sent or saved. Clearing the displayed result does not clear the system clipboard.
How to generate a password
Set the length, choose the character types the site accepts, then select Generate password. Each selected type appears at least once. If the site rejects symbols, turn off the symbols option and generate a new result.
Is the password saved?
The password is generated in your browser and this tool does not send or save it. Select Copy password only when you are ready to copy it. The value then goes to your system clipboard, whose history or sync is controlled by your device. Clearing the displayed result does not clear the clipboard.
Before using the result
Use a different password for each account, and follow that service's length and character rules. This page does not store passwords, recover accounts, check a site's password rules, or rate password strength. A generated password cannot protect an account from phishing, keylogging, or a compromised device.
Generate a Password That Fits the Site’s Rules
Back to toolStart with the site’s password rules
Check the service’s maximum length and allowed characters before choosing settings. This generator accepts whole-number lengths from 8 to 128 and starts at 20. The range is a tool limit; it does not mean the minimum or default length is right for every account.
For example, suppose a site accepts up to 16 characters, requires uppercase letters, lowercase letters, and numbers, and rejects symbols. Set the length to 16, select those three types, and leave Symbols unchecked. The result will have 16 characters and at least one character from each selected type. This is a hypothetical settings example, not a password to reuse.
If a service provides its own password requirements, follow those instructions. This generator cannot check whether a website will accept the result.
Choose character types and decide whether to exclude look-alikes
The available types are uppercase letters A–Z, lowercase letters a–z, numbers 0–9, and these symbols: ! @ # $ % ^ & * ( ) - _ = + [ ] { } ; : , . ?. At least one character is included from every type you select. The remaining positions are filled from the selected characters.
The look-alike option removes I, l, 1, O, 0, and o. That can make a password easier to read or type by hand, but it also narrows the set of available characters. It is a readability option, not a password-strength score or a security guarantee.
If you plan to paste the result from a password manager, you may not need to exclude those characters. If you must type it yourself, the option may reduce confusion. In either case, choose settings that the service actually accepts.
What random generation can and cannot tell you
The tool requests random values from the browser’s Web Crypto API. MDN describes Crypto.getRandomValues() as providing cryptographically strong random values. That describes the browser API; it does not certify this page, your device, the account provider, or the safety of a sign-in session.
NIST SP 800-63B-4 identifies length as a primary factor in password strength. Services following this guidance must not impose character-composition rules, such as requiring a mix of uppercase letters, numbers and symbols. The character choices here are provided to help match a particular site’s input rules. A required uppercase letter or symbol by itself does not show that an account is safe.
This tool does not compare a generated password with a service’s blocklist, estimate how long it would take to guess, or test whether the device is free of malware. A longer random password still cannot prevent phishing, keystroke logging, or someone gaining control of the device.
Copy the result and save it before leaving
Select Copy password when you are ready to use the result. If automatic copying is unavailable, select the text in the result field and copy it manually. Before pasting, check that the cursor is in the intended service’s password field.
A copied password remains in the system clipboard until the device or another app changes it. Clipboard history or syncing may depend on your operating system and settings. Clearing the displayed result does not erase the system clipboard.
Changing a setting or generating another password clears the current result. Refreshing or leaving the page also removes it, and this tool cannot recover it later. After the service accepts the new password, save it in the password manager or other method you chose and confirm that the entry belongs to the right account.
Limits and common questions
What happens if I select only one character type?
Every character in the result comes from the selected type. If you select more than one type, the result includes at least one from each selected type.
Does the tool rate or guarantee the password?
No. It does not show a strength score or guarantee that an account cannot be compromised. The result is limited to 8–128 characters and the character types listed above. Follow the service’s rules and protect the account with the options the service provides.
Does copying or clearing remove every copy?
No. Copying puts the password on the system clipboard. Clearing the displayed result does not erase clipboard history, device sync, or a password manager entry. Manage those copies through your device and the storage method you chose.
Sources
- MDN: Crypto.getRandomValues()Describes the browser API used to obtain cryptographically strong random values; it does not assess this tool or an account’s overall security.
- NIST SP 800-63B-4: Authentication and Lifecycle ManagementCurrent U.S. digital identity guidance for password verifiers, including length and composition requirements. Its scope is verifier policy, not a universal rule for every website.
- NIST SP 800-63B-4: Strength of PasswordsExplains the role of length and the limits of composition rules, including threats that length and complexity do not prevent.
Updated