Flexible output
Choose a conventional password, readable passphrase, numeric PIN, UUID, or API-style token.
Create passwords, memorable passphrases, PINs, UUIDs and API-style keys with your browser's cryptographic random generator.
Build a random password from the character sets you choose.
This tool generates new values only. It does not ask for, test, or store your existing credentials.
Choose a conventional password, readable passphrase, numeric PIN, UUID, or API-style token.
Generation uses crypto.getRandomValues, not
predictable Math.random output.
No account, server log, history list, or recovery feature exists for generated values.
A generator solves only one part of account security: creating an unpredictable value. Every important account should receive a unique secret so that a breach at one service cannot unlock another.
A random character password is compact and well suited to a password manager. A randomly selected multi-word passphrase can be easier to type. Do not turn a favorite quotation, name or predictable sentence into a “passphrase”; human choices are much less random than generated words.
The displayed bit value describes the generator’s theoretical choice space under its assumptions. It does not measure device security, clipboard exposure, phishing resistance, website storage practices or whether the same password is reused elsewhere.
Read the complete password and passphrase guide →
Last updated 6 September 2026. Security guidance is educational and is revised when generation behavior changes.
No. It does not create an account, history or recovery copy. Save the new value in your chosen password manager before leaving the page.
The generator uses the browser Web Crypto API rather than Math.random. The security of the full workflow still depends on your browser, operating system and device.
No. The tool creates new values and does not need an existing password. Avoid entering current credentials into password-testing pages.
Not automatically. UUIDs are primarily identifiers. Use the dedicated password or API-key mode when a secret is required and follow the receiving system’s format rules.
Store it in a reputable password manager, enable multi-factor authentication when available and never reuse it on another account.