Random Password Generator creates up to 20 random passwords at once, 8 to 128 characters long, from the character sets you tick, using the browser's cryptographically secure random number generator (crypto.getRandomValues), never Math.random, and never sends or stores what it produces.
How to read the result
Each line of the output is one password. The note under it gives the length and the size of the alphabet used; together those two numbers are the password's whole strength, since a properly random string has no pattern to analyse. Longer is stronger for any character set.
Defender tips
- Prefer length over forced complexity: a longer password from a wide character set beats a short one crammed with mandatory symbol and digit rules.
- Store generated passwords in a password manager rather than memorising or reusing them; a unique password per site is what actually limits the damage from any one breach.
- If a system rejects some symbols, untick Symbols and add a few characters of length instead; the extra length more than makes up for the smaller alphabet.
FAQ
Does this use Math.random?
No. It uses crypto.getRandomValues, the Web Crypto API's cryptographically secure source, which is the correct source for anything security-relevant; Math.random is not designed to resist prediction.
Is the generated password sent anywhere or logged?
No. Generation and display happen entirely in your browser, and the tool keeps no history and never puts its settings or results in a share link.
Is every character equally likely?
Yes. A random byte that would make some characters more likely than others (modulo bias) is discarded and drawn again, so every character in the chosen alphabet has the same chance.