Password Generator

When to use Password Generator

You got a HaveIBeenPwned alert for a credential you reused on three different services and now you need strong, distinct replacements for each account before the weekend is over. Pick a length, toggle the character classes you want — uppercase, lowercase, digits, symbols — and the Web Crypto API generates entropy you couldn't produce yourself by mashing a keyboard. The output is never transmitted anywhere and nothing is stored between sessions, so the passwords exist only in your clipboard and wherever you save them next. Useful for rotating shared service credentials, setting up a new API key vault entry, or generating the root password for a staging database that needs to meet a complexity policy.

• Rotate credentials after a HaveIBeenPwned breach notification
• Generate a root password meeting a corporate complexity policy
• Create distinct service account passwords for a new AWS environment

About this tool

Need a strong password right now? Pick a length, toggle the character classes you want — uppercase, lowercase, numbers, symbols — and copy a fresh one in a click. Generation uses your browser's cryptographic random source (the Web Crypto API — the same one your bank's site uses under the hood), so the output is never transmitted anywhere and nothing is stored between sessions. Handy for signing up for a new service, rotating a password that appeared in a breach notification, or setting up a shared-access account. Generate in bulk if you need a batch — each one is independent.

Tips

• Enable all four character classes — uppercase, lowercase, numbers, and symbols — for the broadest possible search space. A 16-character password using all classes gives you well over 90 bits of entropy.
• Aim for at least 16 characters for accounts that matter. Many sites still enforce an 8-character minimum, but doubling that length squares the difficulty of a brute-force attack.
• Generate a fresh password for each account rather than reusing variants. Reuse means a single breach can unlock multiple services — treat every account as its own isolated secret.