About Password Generator
Password Generator produces random passwords of a length you choose, drawing from whichever character sets you enable: capitals, small letters, digits and symbols. Length runs from four to a hundred and twenty-eight characters, and up to a hundred passwords can be produced at once.
The randomness comes from the browser cryptographic source rather than the ordinary pseudo-random generator, which is the property that matters here. A predictable sequence, even a long one, is not a password — if an attacker can reproduce the sequence they can reproduce the password. Using the platform random source is what makes these suitable for real accounts rather than for placeholders.
One behaviour needs stating, because it trips people up with strict sign-up forms. The characters are drawn purely at random from the combined pool, so a password is not guaranteed to contain at least one character from every set you ticked. Ticking digits does not guarantee a digit appears. Many sites enforce a policy requiring one of each type, so a generated password can be rejected at registration — lengthen it, which makes the absence less likely, or regenerate until the result satisfies the form.
How to use Password Generator
- 1 Set the password length — sixteen is a reasonable default, longer is better.
- 2 Tick the character sets you want included, bearing in mind that each one you turn off reduces the strength.
- 3 Choose how many passwords to generate and pick one from the list.
- 4 Store it in a password manager rather than trying to memorise it.
Frequently asked questions
Is every selected character type guaranteed to appear?
No. Characters are drawn randomly from the combined pool, so a password can legitimately contain no digits even when digits were enabled. If a site insists on one of each type, generate a longer password or regenerate until the result qualifies.
Where does the randomness come from?
The browser cryptographic random source, the same facility used for encryption keys, rather than a seeded pseudo-random sequence. That is what allows these passwords to be treated as unguessable rather than merely unpredictable-looking.
How long should a password be?
Length buys more strength than character variety does, so a longer password of mixed letters and digits usually beats a short one with symbols. Sixteen characters is a sensible floor for anything that matters, and the cost of going longer is only that a password manager has to store it.
Should I avoid symbols because some sites reject them?
Turning symbols off costs you a little entropy but avoids a class of registration failures caused by over-restrictive validation, including symbols the form does not expect. Compensate by adding length, which is the more effective lever anyway.
Free, online, and private
Free to use
Password Generator is completely free. There is no account to create, no login, and no hidden charge or usage limit.
Runs online in your browser
It is a free online tool that runs entirely in your browser. Nothing to download or install — open the page and start using it right away.
Your data stays private
All processing happens locally on your device. Your input is never uploaded, stored, or tracked, so it never leaves your browser.
How Password Generator behaves in detail
These are the specifics of this implementation — the exact ranges, defaults and fixed settings you are working with.
| Parameter | Value |
|---|---|
| Length range | 4 – 128 characters (default 16) |
| Batches per click | 1 – 100 (default 5) |
| Randomness source | crypto.getRandomValues, not Math.random |
| Character sets | 4 toggles: A-Z, a-z, 0-9, and 26 symbols |
| Pool size | 88 characters when all four are enabled — 62 alphanumeric plus 26 symbols |
Compiled from the implementation of this tool and checked against it by itoolnet.
What Password Generator does not do
Knowing the edges of a tool saves more time than another list of its features. These are the cases where it will not do what you might expect.
- The symbol set is the fixed 26-character list !@#$%^&*()_+-=[]{}|;:,.<>? — no other punctuation is drawn from. A site that rejects one of these characters needs a different tool or a manual edit.
- Every character is drawn uniformly from the enabled pool with no post-processing, so a generated password is not guaranteed to contain at least one character from each enabled set. A 4-character password may come back as four lowercase letters.
Tested and documented by itoolnet, the team that builds and maintains this site.