Kit-Bin
Donate

Random Password Generator

Generate a strong random password locally, using the browser's secure random number generator.

Processed entirely in your browser. Never uploaded to a server.

Adjust the length and character sets, and a new password generates automatically using your browser's cryptographically secure random number generator — the same kind used to generate encryption keys, not the predictable randomness behind Math.random() or most everyday code. Every character is drawn with rejection sampling to avoid the slight bias a naive modulo-based approach introduces, so the result is genuinely uniformly random across your chosen character set, not just random-looking.

The entropy readout under the password tells you how many possible passwords could have been generated with your current settings — length and character-set size both matter, and each extra bit doubles that number. Above roughly 60 bits, a randomly generated password stops being the weak point in your security; reusing it across accounts or storing it insecurely matters far more than squeezing out a few more bits.

FAQ

Is the password sent anywhere?
No. It never leaves this browser tab — there is nothing to send it to. Nothing about it is logged, stored, or transmitted.
How is the randomness generated?
With the Web Crypto API's crypto.getRandomValues(), a cryptographically secure random number generator built into the browser — not Math.random(), which is not designed to be unpredictable enough for secrets.
What do the bits of entropy mean?
It's a measure of how many possible passwords could have been generated with these settings — every extra bit doubles that number. Above roughly 60 bits, a random password is not the weak point in your security; reusing it or storing it insecurely is.
Should I use the same generated password everywhere?
No. Generate a new one for each account and use a password manager to store them — a strong password that gets reused everywhere is only as safe as the single weakest place it gets typed into.

Want the actual math behind "strong"? Read password entropy explained. Curious exactly how the randomness is generated? See how this generator gets its randomness or, for the password you actually have to type yourself, passphrase vs random password.

Already have a password and want to check its entropy instead of generating a new one? Use Password Entropy Checker.

Related tools: UUID Generator, SHA-256 Hash, Base64 Encode/Decode.