Password Generator

A new account needs a password you did not reuse. Password Generator builds one in the browser from the length and sets you choose.

Length and the four sets

The slider runs from 4 to 128 characters. Turn on lowercase, uppercase, numbers, and symbols. Symbols are !@#$%^&*()-_=+[]{}. At least one set must stay on. The generator reads random bytes and maps each byte into the combined alphabet. It does not guarantee that every selected set appears at least once. A short password with all four sets can still miss symbols. Longer is the useful knob. Twelve or more is a practical floor for an account you care about. The string is not uploaded and not saved. Copy it into a password manager. /blog/password-generator-vs-strength-meter compares this with a strength check.

What “random” means here

The bytes come from the browser’s crypto random source, not from a clock or a word list. Mapping with a remainder can slightly favor earlier characters in the alphabet when the alphabet length does not divide 256. For a normal password that bias is small next to the risk of a short length or a reused phrase. This is not a diceware passphrase of dictionary words. /blog/diceware-vs-password-generator covers that style. Password Strength Meter scores a password you already have. It does not create one.

When a generated password is the wrong fit

Some sites reject symbols or cap the length. Turn symbols off or shorten the slider before you submit, rather than editing the password down to a pet’s name. API Key Generator and Random Token Generator are for tokens, not for a human login you will type on a phone. TOTP Generator is for authenticator codes. UUID Generator makes identifiers, not secrets you should use as a password. Never paste the result into a chat. If a site shows the password, read it back once, then store it. Generating again gives a different string, and the old one is not saved here.