Password Generator

Generate a strong, random password. Uses your browser's cryptographically secure random number generator — the same kind used for encryption — not a predictable pseudo-random one. Nothing is sent to a server.

Why this uses crypto.getRandomValues

JavaScript's regular Math.random() isn't designed to be unpredictable in a security sense — in some engines its internal state can be inferred from enough output. Password generators should use a cryptographically secure source instead, which is what the Web Crypto API's getRandomValues() provides. That's what powers this tool.