Generators

Password generator

Password generator draws a random password from the character types you pick (lowercase, uppercase, digits and symbols) at a length from 4 to 128, 16 by default. Every character comes from the browser's cryptographic random number generator, with rejection sampling so no character is likelier than another, and a draw is repeated until each type you ticked appears at least once, so a site that demands a digit and a symbol will accept it. A password is written to the Output box when the tool opens, and "Generate New" draws another.

How to use Password Generator

  1. Open Password Generator in the Toolbox101 app; a 16-character password is already in the Output box.
  2. Set Length and tick the character types you want: a-z, A-Z, 0-9 and Symbols. The password is redrawn as you change them.
  3. Click Generate New to draw another with the same settings.
  4. Click Copy and paste it into the account or password-manager entry you are creating.

Worked example

Password Generator gives a different result every time, so yours will differ. This is one run:

Output

30j$K*[)A:H?;5Ei

Frequently asked questions

How random are the passwords?

Every character comes from crypto.getRandomValues, the browser's cryptographic random generator, never Math.random. With all four types ticked each character is one of 87, so a 16-character password carries about 100 bits of entropy. Shorter lengths or fewer types lower that, so for anything important keep the length up.

Which symbols can appear?

These 25: ! @ # $ % ^ & * ( ) - _ = + [ ] { } ; : , . ? / ~. Untick Symbols for sites that reject them, and lengthen the password to make up for the smaller alphabet.

Will every password contain every type I picked?

Yes. A draw is repeated until each ticked type appears at least once, so a site that insists on a digit and a symbol accepts the result. The minimum length is the number of types ticked, and the box accepts 4 to 128.

Can I use these for accounts that matter?

The randomness is suitable. The risk is in handling: a password is only as safe as where you put it, so paste it straight into a password manager, never reuse it across sites, and turn on two-factor sign-in for the accounts you care about most.

Use Password Generator now

Runs in your browser. Nothing you type is uploaded.