🔑

Password Generator

Generate random passwords with a chosen length and character pool

Security Generation

🔒 100% client-side — your data never leaves this page

Maintained by Evan•Updated: September 29, 2026•Reviewed: September 29, 2026

Editorial Policy/Privacy/Report issue

English version/Chinese version

Choose a length and character pool, then generate. Changing any generation setting clears the previous results.

Generation mode

Character length

Character pool Uppercase A–Z Lowercase a–z Digits 0–9 Symbols !@#$…

Each position is sampled independently from the selected pool; every selected character type is not guaranteed to appear. There is no ambiguous-character filter or custom exclusion list. Check the destination site’s password rules.

Count (1–10)

Generated with browser Web Crypto. Passwords stay in this page’s memory, are not saved to browser storage, and are not sent to analytics. Copying places the result on your system clipboard.

Generated results

No passwords generated yet. Choose your settings and click Generate passwords.

Page reading mode

The full guide also includes pitfalls, worked examples, snippets, FAQs, and related tools for checking results or troubleshooting.

About this tool

Generate 8–64 character passwords locally with the browser’s Web Crypto random source. Choose uppercase letters, lowercase letters, digits and symbols as the allowed pool; each selected class is allowed, but is not guaranteed to appear in every result. The default is 24 random characters. Changing options clears the old output. Passwords are not saved by this tool or included in analytics. Copy a fresh result into a password manager and check the receiving site’s rules. The small-wordlist mode is a format demonstration, not a substitute for a large-wordlist passphrase generator.

Production Snippets

Small-wordlist format example — do not use as a password

text

Apple-bridge-cloud-dance42
4 words from 51 + a number from 10 to 99 ≈ 29 bits

Scenario Recipes

Generate a 24-character alphanumeric password

Goal: Create a copyable value for a service that disallows symbols.

Choose random characters and length 24.
Enable uppercase, lowercase and digits; disable symbols. Generate one result.
Check that the result has 24 characters and only A–Z, a–z and 0–9 before copying it into a password manager.

Result: The pool has 62 characters, so the estimate is about 143 bits. A selected class is allowed rather than mandatory.

Failure Input Library

No character classes selected

Bad input: Random-character mode with all four classes unchecked.

Failure: Generation cannot proceed; the tool shows an error and clears previous passwords.

Fix: Enable at least one allowed class and generate a new result.

Suggested Workflow

Password and Token Handling: Generate, Check, and Revoke a Test Credential

Try a 24-character password, compare token length units, separate hashes from HMAC, and rehearse credential replacement with a test account.

Frequently Asked Questions

Does selecting a character class require it in every password?

No. Selected classes form the allowed pool. Each character is sampled independently, so a class may be absent. Check the destination policy separately.

What does the entropy estimate mean?

For random characters it is length × log2(pool size), assuming uniform independent draws. It describes generation possibilities, not a cracking-time guarantee or the security of the receiving account.

Is the small-wordlist mode suitable for an important account?

The built-in list has only 51 words. Four words plus a random two-digit suffix provide about 29 bits. Use random-character mode or a reputable large-wordlist generator for important credentials.

Are passwords stored or transmitted?

Generated values stay in page memory until you clear, change options, or leave. This tool does not persist or send them to analytics. Copying places the value on your device clipboard.

Does this tool create an account or issue expiring credentials?

No. It generates strings only. Account creation, first-login reset, expiry, revocation and MFA belong to the receiving service. Do not use documentation examples as real passwords.

Keep browsing

←Back to focusSecurity Generation1 tools ←Back to categoryGenerators11 tools