Random Password Generator

A password generator creates random strings meeting specified complexity requirements — length, uppercase letters, lowercase letters, numbers, and special symbols. A generated password has much higher entropy than a human-chosen one, making it resistant to dictionary and brute-force attacks.

For general accounts, 16–20 characters is the current recommendation. For high-value accounts (banking, email, password manager master password), use 20–30 characters. Length is more important than complexity — a random 20-character lowercase string is far stronger than an 8-character mixed-case password. A password manager generates and stores long random passwords so you only need to remember one.

A random password uses a mix of characters (letters, digits, symbols) in a short string (12–20 chars). A passphrase combines several random words (correct-horse-battery-staple style) into a longer string (30–50 chars). Passphrases are easier to type and remember, harder to crack due to length. Both are strong when generated randomly — never compose them yourself.

No. The generator uses the browser's crypto.getRandomValues() API, which produces cryptographically secure random numbers. A 16-character password from a 95-character set has 10^31 possible values. Even at a billion guesses per second, exhaustive search would take longer than the age of the universe. The main threat is reuse, phishing, or data breaches — not brute force.

Special characters add entropy but many services restrict which symbols are allowed (some reject ! or @ in passwords). A longer password without symbols often has more entropy than a short password with symbols: 20 lowercase characters have 26^20 ≈ 2 × 10^28 combinations vs 8 mixed-case-digit-symbol characters at roughly 10^15. Prioritise length; add symbols where the service allows it.