EachCalculator

Password Generator

Generate a strong, random password using a cryptographically secure random source — entirely in your browser, nothing is ever sent anywhere.

How It Works

Cryptographically secure randomness

Each character is chosen using the Web Crypto API's secure random number generator — the same class of randomness used for cryptographic keys — rather than a predictable pseudo-random source.

Character sets and strength

Turning on more character types (uppercase, lowercase, numbers, symbols) and increasing length both increase the number of possible passwords, making the result harder to guess or brute-force.

Why Length Matters More Than Complexity

A 16-character password using only lowercase letters is harder to brute-force than an 8-character password using every character type — length has an outsized effect on total possible combinations.

Common Mistakes

  • Reusing the same password across multiple accounts — a breach on one site can compromise all of them.
  • Choosing a short password even with all character types enabled — length matters more than character variety for resisting brute-force attempts.
  • Storing generated passwords in plain text — use a password manager instead.

Frequently Asked Questions

Is it safe to generate a password on a website?
This generator runs entirely in your browser using JavaScript — no password is ever transmitted to a server or logged anywhere. That said, for maximum peace of mind, only use password generators from sources you trust, or your password manager's built-in generator.
How long should my password be?
Most current guidance recommends at least 12-16 characters for important accounts, longer where the site allows it — length is the single biggest factor in password strength.
Should I use symbols in my password?
Symbols increase the character set size and therefore the difficulty of guessing, but a long password with fewer character types is often stronger than a short one with every type enabled.